Lucene search
Ubuntu.comUB:CVE-2022-3650HistoryJan 17, 2023 - 12:00 a.m.
CVE-2022-3650
2023-01-1700:00:00
ubuntu.com
ubuntu.com
11
ceph
privilege escalation
cve-2022-3650
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a
local attacker to escalate privileges to root in the form of a crash dump,
and dump privileged information.
Bugs
- <https://tracker.ceph.com/issues/57967>
- <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1024932>
Notes
| Author | Note |
|---|---|
| mdeslaur | This is fixed in 17.2.6 in lunar-proposed, but is not yet in the -security pocket. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | ceph | < 15.2.17-0ubuntu0.20.04.3 | UNKNOWN |
| ubuntu | 22.04 | noarch | ceph | < 17.2.5-0ubuntu0.22.04.3 | UNKNOWN |
| ubuntu | 22.10 | noarch | ceph | < 17.2.5-0ubuntu0.22.10.3 | UNKNOWN |
| ubuntu | 23.04 | noarch | ceph | < 17.2.6-0ubuntu0.23.04.2 | UNKNOWN |
| ubuntu | 23.10 | noarch | ceph | < 17.2.6-0ubuntu1 | UNKNOWN |
| ubuntu | 24.04 | noarch | ceph | < 17.2.6-0ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | ceph | < any | UNKNOWN |
Related
nessus
nessus
Fedora 36 : ceph (2023-d6b219d19a)
2023-04-24 00:00:00
GLSA-202312-10 : Ceph: Root Privilege Escalation
2023-12-23 00:00:00
RHEL 8 : Red Hat Ceph Storage 5.3 Bug fix and (RHSA-2023:0980)
2023-02-28 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-3650 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
CVE-2022-3650 affecting package ceph for versions less than 16.2.10-4
2024-06-12 22:23:00
cve
cve
CVE-2022-3650
2023-01-17 19:15:11
openvas
openvas
Fedora: Security Advisory for ceph (FEDORA-2023-d6b219d19a)
2023-04-24 00:00:00
Ubuntu: Security Advisory (USN-6292-1)
2023-08-17 00:00:00
Mageia: Security Advisory (MGASA-2023-0139)
2023-04-17 00:00:00
prion
prion
Privilege escalation
2023-01-17 19:15:00
cvelist
cvelist
CVE-2022-3650
2023-01-17 00:00:00
redhat
redhat
veracode
veracode
Denial Of Service (DoS)
2022-12-05 11:03:16
osv
osv
CVE-2022-3650
2023-01-17 19:15:11
ceph vulnerabilities
2023-05-09 21:51:19
gentoo
gentoo
Ceph: Root Privilege Escalation
2023-12-23 00:00:00
nvd
nvd
CVE-2022-3650
2023-01-17 19:15:11
debiancve
debiancve
CVE-2022-3650
2023-01-17 19:15:11
ubuntu
ubuntu
Ceph vulnerability
2023-08-16 00:00:00
Ceph vulnerabilities
2023-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: ceph-16.2.12-1.fc36
2023-04-23 01:23:55
redhatcve
redhatcve
CVE-2022-3650
2022-10-25 15:57:03
mageia
mageia
Updated ceph packages fix security vulnerability
2023-04-15 22:03:44
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2022-3650