CVE-2022-3854

2023-03-0600:00:00

CWE-177

redhat

www.cve.org

flaw

ceph

url processing

rgw

denial of service

cve-2022-3854

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.1%

JSON

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ceph",
    "versions": [
      {
        "version": "As shipped with Red Hat Ceph 3, 4, and 5.",
        "status": "affected"
      }
    ]
  }
]