Published: 06/03/2023 Updated: 13/03/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat ceph storage 3.0
redhat ceph storage 4.0
redhat ceph storage 5.0

Debian Bug report logs - #1027151 ceph: CVE-2022-3854 Package: src:ceph; Maintainer for src:ceph is Ceph Packaging Team <team+ceph@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 28 Dec 2022 17:54:01 UTC Severity: important Tags: security, upstream Found in version ceph/16210+ds-3 ...

DescriptionA flaw was found in Ceph, relating to the URL processing on RGW backends An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of serviceA flaw was found in Ceph, relating to the URL processing on RGW backends An attacker can exploit the URL processing by providing a null URL to c ...

NVD-CWE-Other https://bugzilla.redhat.com/show_bug.cgi?id=2139925 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1027151 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2022-3854

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-3854

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect