What is CVE-2022-3854?

CVE-2022-3854 is a medium-severity vulnerability in Redhat Ceph_storage, classified under CWE-177. CVSS score: 6.5/10. Published 2023-03-06.

How severe is CVE-2022-3854?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Redhat Ceph_storage

CVE-2022-3854

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.

EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Redhat Ceph_storage — versions 3.0, 4.0, 5.0
N/a Ceph — versions As shipped with Red Hat Ceph 3, 4, and 5.

Weakness classification (CWE)

CWE-177

References

secalert@redhat.com (Issue Tracking)

Frequently asked questions

What is CVE-2022-3854?: CVE-2022-3854 is a medium-severity vulnerability in Redhat Ceph_storage, classified under CWE-177. CVSS score: 6.5/10. Published 2023-03-06.
How severe is CVE-2022-3854?: Medium severity. CVSS v3 base score is 6.5 out of 10.