A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.

The version of ceph installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3650 advisory.

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202312-10 (Ceph: Root Privilege Escalation)

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6292-1 advisory.

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 22.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6063-1 advisory.

  - A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length     is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be     exploited for loss of confidentiality and integrity on encrypted disks. (CVE-2021-3979)

  - A flaw was found in Openstack manilla owning a Ceph File system share, which enables the owner to     read/write any manilla share or entire file system. The vulnerability is due to a bug in the volumes     plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file     system. Fixed in RHCS 5.2 and Ceph 17.2.2. (CVE-2022-0670)

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

  - A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL     processing by providing a null URL to crash the RGW, causing a denial of service. (CVE-2022-3854)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d6b219d19a advisory.

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1581-1 advisory.

  - A flaw was found in Openstack manilla owning a Ceph File system share, which enables the owner to     read/write any manilla share or entire file system. The vulnerability is due to a bug in the volumes     plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file     system. Fixed in RHCS 5.2 and Ceph 17.2.2. (CVE-2022-0670)

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

  - A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL     processing by providing a null URL to crash the RGW, causing a denial of service. (CVE-2022-3854)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1580-1 advisory.

  - A flaw was found in Openstack manilla owning a Ceph File system share, which enables the owner to     read/write any manilla share or entire file system. The vulnerability is due to a bug in the volumes     plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file     system. Fixed in RHCS 5.2 and Ceph 17.2.2. (CVE-2022-0670)

  - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate     privileges to root in the form of a crash dump, and dump privileged information. (CVE-2022-3650)

  - A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL     processing by providing a null URL to crash the RGW, causing a denial of service. (CVE-2022-3854)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0980 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    Security Fix(es):

    * Ceph: ceph-crash.service allows local ceph user to root exploit (CVE-2022-3650)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    These updated packages include various bug fixes. Space precludes documenting all of these changes in this     advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on the most     significant of these changes:

    https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/5.3/html/release_notes/index

    All users of Red Hat Ceph Storage are advised to upgrade to these updated packages that provide various     bugs and security fixes.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
201682	CBL Mariner 2.0 Security Update: ceph (CVE-2022-3650)	Nessus	MarinerOS Local Security Checks	high
187284	GLSA-202312-10 : Ceph: Root Privilege Escalation	Nessus	Gentoo Local Security Checks	high
179904	Ubuntu 23.04 : Ceph vulnerability (USN-6292-1)	Nessus	Ubuntu Local Security Checks	high
175537	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Ceph vulnerabilities (USN-6063-1)	Nessus	Ubuntu Local Security Checks	critical
174654	Fedora 36 : ceph (2023-d6b219d19a)	Nessus	Fedora Local Security Checks	high
173611	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ceph (SUSE-SU-2023:1581-1)	Nessus	SuSE Local Security Checks	critical
173448	SUSE SLES15 Security Update : ceph (SUSE-SU-2023:1580-1)	Nessus	SuSE Local Security Checks	critical
171980	RHEL 8 / 9 : Red Hat Ceph Storage 5.3 Bug fix (RHSA-2023:0980)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2022-3650

high

Tenable Plugins

high

high

high

critical

high

critical

critical

high