Input validation error in Ceph - CVE-2022-3854

Vulnerability identifier: #VU74055

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-3854

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input when handling URL on RGW backends. A remote attacker can pass specially crafted URL to the application and perform a denial of service (DoS) attack.

Ceph
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Basesystem Module
openSUSE Leap
Ubuntu
ceph-common (Ubuntu package)
ceph-base (Ubuntu package)
ceph (Ubuntu package)
librados2-debuginfo
cephadm
python3-rbd
python3-ceph-common
librgw2-debuginfo
librgw2
ceph-debugsource
ceph-common
python3-rgw
librbd1
python3-ceph-argparse
python3-cephfs
ceph-base-debuginfo
rbd-nbd
python3-cephfs-debuginfo
python3-rados-debuginfo
python3-rbd-debuginfo
rbd-nbd-debuginfo
python3-rados
ceph-base
python3-rgw-debuginfo
libcephfs2-debuginfo
libcephfs2
ceph-common-debuginfo
librados2
librbd1-debuginfo
librados-devel-debuginfo
libcephfs-devel
librgw-devel
librados-devel
librbd-devel
libradospp-devel
rados-objclass-devel
ceph-mgr-diskprediction-local
ceph-grafana-dashboards
rbd-fuse-debuginfo
ceph-mgr-k8sevents
ceph-mgr-modules-core
ceph-mgr-rook
ceph-mgr-cephadm
ceph-test
ceph-test-debuginfo
ceph-test-debugsource
ceph-mgr-dashboard
cephfs-top
ceph-osd-debuginfo
ceph-mgr-debuginfo
cephfs-shell
cephfs-mirror-debuginfo
cephfs-mirror
rbd-fuse
ceph-fuse
ceph-fuse-debuginfo
ceph-osd
ceph
ceph-mds
ceph-mon-debuginfo
ceph-prometheus-alerts
ceph-immutable-object-cache
ceph-radosgw
ceph-radosgw-debuginfo
ceph-mon
ceph-mgr
ceph-immutable-object-cache-debuginfo
ceph-mds-debuginfo
libcephsqlite
rbd-mirror
libcephsqlite-devel
rbd-mirror-debuginfo
libcephsqlite-debuginfo

Install updates from vendor's website.

Ceph - update to 16.2.11
ceph-common (Ubuntu package) - addressed in versions 12.2.13-0ubuntu0.18.04.11, 15.2.17-0ubuntu0.20.04.3, 17.2.5-0ubuntu0.22.04.3, 17.2.5-0ubuntu0.22.10.3
ceph-base (Ubuntu package) - addressed in versions 12.2.13-0ubuntu0.18.04.11, 15.2.17-0ubuntu0.20.04.3, 17.2.5-0ubuntu0.22.04.3, 17.2.5-0ubuntu0.22.10.3
ceph (Ubuntu package) - addressed in versions 12.2.13-0ubuntu0.18.04.11, 15.2.17-0ubuntu0.20.04.3, 17.2.5-0ubuntu0.22.04.3, 17.2.5-0ubuntu0.22.10.3
librados2-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephadm - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-common - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2 - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-debugsource - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1 - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-argparse - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2 - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2 - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.3.6.1, 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel-debuginfo - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs-devel - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw-devel - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd-devel - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
libradospp-devel - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
rados-objclass-devel - addressed in versions 16.2.11.58+g38d6afd3b78-150300.5.7.1, 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-diskprediction-local - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-grafana-dashboards - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-k8sevents - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-modules-core - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-rook - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-cephadm - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test-debugsource - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-dashboard - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-top - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-shell - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-prometheus-alerts - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-devel - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-debuginfo - update to 16.2.11.58+g38d6afd3b78-150400.3.6.1

• https://bugzilla.redhat.com/show_bug.cgi?id=2139925
• https://tracker.ceph.com/issues/55765
• https://bugzilla.suse.com/show_bug.cgi?id=1205025

• Multiple vulnerabilities in Ceph
• SUSE update for ceph
• SUSE update for ceph
• SUSE update for ceph
• SUSE update for ceph
• Ubuntu update for ceph