SUSE update for ceph
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2022-0670 CVE-2022-3650 CVE-2022-3854 |
| CWE-ID | CWE-264 CWE-276 CWE-20 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
SUSE Linux Enterprise Micro for Rancher Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system Basesystem Module Operating systems & Components / Operating system openSUSE Leap Micro Operating systems & Components / Operating system SUSE Linux Enterprise Micro Operating systems & Components / Operating system SUSE Manager Retail Branch Server Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system ceph-test-debugsource Operating systems & Components / Operating system package or component ceph-test-debuginfo Operating systems & Components / Operating system package or component ceph-test Operating systems & Components / Operating system package or component ceph-mgr-cephadm Operating systems & Components / Operating system package or component cephadm Operating systems & Components / Operating system package or component ceph-mgr-rook Operating systems & Components / Operating system package or component ceph-mgr-modules-core Operating systems & Components / Operating system package or component ceph-mgr-k8sevents Operating systems & Components / Operating system package or component ceph-mgr-dashboard Operating systems & Components / Operating system package or component ceph-grafana-dashboards Operating systems & Components / Operating system package or component ceph-mgr-diskprediction-local Operating systems & Components / Operating system package or component cephfs-top Operating systems & Components / Operating system package or component ceph-prometheus-alerts Operating systems & Components / Operating system package or component ceph-immutable-object-cache Operating systems & Components / Operating system package or component librados-devel-debuginfo Operating systems & Components / Operating system package or component ceph-radosgw Operating systems & Components / Operating system package or component python3-rados-debuginfo Operating systems & Components / Operating system package or component libcephfs-devel Operating systems & Components / Operating system package or component librgw2-debuginfo Operating systems & Components / Operating system package or component ceph-radosgw-debuginfo Operating systems & Components / Operating system package or component python3-rgw-debuginfo Operating systems & Components / Operating system package or component ceph-mon-debuginfo Operating systems & Components / Operating system package or component ceph-mon Operating systems & Components / Operating system package or component ceph-mgr Operating systems & Components / Operating system package or component libcephsqlite Operating systems & Components / Operating system package or component python3-rados Operating systems & Components / Operating system package or component libcephsqlite-debuginfo Operating systems & Components / Operating system package or component rbd-mirror-debuginfo Operating systems & Components / Operating system package or component libcephsqlite-devel Operating systems & Components / Operating system package or component librbd-devel Operating systems & Components / Operating system package or component rbd-mirror Operating systems & Components / Operating system package or component python3-rgw Operating systems & Components / Operating system package or component python3-rbd Operating systems & Components / Operating system package or component ceph-mds-debuginfo Operating systems & Components / Operating system package or component python3-ceph-common Operating systems & Components / Operating system package or component ceph-common Operating systems & Components / Operating system package or component ceph-immutable-object-cache-debuginfo Operating systems & Components / Operating system package or component rbd-nbd Operating systems & Components / Operating system package or component python3-cephfs-debuginfo Operating systems & Components / Operating system package or component libradospp-devel Operating systems & Components / Operating system package or component python3-cephfs Operating systems & Components / Operating system package or component ceph-osd-debuginfo Operating systems & Components / Operating system package or component ceph-mgr-debuginfo Operating systems & Components / Operating system package or component rbd-nbd-debuginfo Operating systems & Components / Operating system package or component libcephfs2-debuginfo Operating systems & Components / Operating system package or component cephfs-shell Operating systems & Components / Operating system package or component ceph-base Operating systems & Components / Operating system package or component ceph-common-debuginfo Operating systems & Components / Operating system package or component cephfs-mirror-debuginfo Operating systems & Components / Operating system package or component cephfs-mirror Operating systems & Components / Operating system package or component librados-devel Operating systems & Components / Operating system package or component librgw2 Operating systems & Components / Operating system package or component ceph-base-debuginfo Operating systems & Components / Operating system package or component rbd-fuse Operating systems & Components / Operating system package or component rados-objclass-devel Operating systems & Components / Operating system package or component python3-rbd-debuginfo Operating systems & Components / Operating system package or component python3-ceph-argparse Operating systems & Components / Operating system package or component ceph-fuse Operating systems & Components / Operating system package or component ceph-fuse-debuginfo Operating systems & Components / Operating system package or component ceph-osd Operating systems & Components / Operating system package or component ceph Operating systems & Components / Operating system package or component libcephfs2 Operating systems & Components / Operating system package or component ceph-mds Operating systems & Components / Operating system package or component librgw-devel Operating systems & Components / Operating system package or component rbd-fuse-debuginfo Operating systems & Components / Operating system package or component librbd1-debuginfo Operating systems & Components / Operating system package or component ceph-debugsource Operating systems & Components / Operating system package or component librados2-debuginfo Operating systems & Components / Operating system package or component librbd1 Operating systems & Components / Operating system package or component librados2 Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Permissions, Privileges, and Access Controls
EUVDB-ID: #VU66440
Risk: Medium
CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-0670
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to an error within the "volumes" plugin in Ceph Manager. The Openstack manilla owning a Ceph File system "share" enables the owner to read/write any manilla share or entire file system.
MitigationUpdate the affected package ceph to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro for Rancher: 5.3
SUSE Linux Enterprise Server for SAP Applications 15: SP4
SUSE Linux Enterprise Server 15: SP4
SUSE Linux Enterprise Real Time 15: SP4
SUSE Linux Enterprise High Performance Computing 15: SP4
SUSE Linux Enterprise Desktop 15: SP4
Basesystem Module: 15-SP4
openSUSE Leap Micro: 5.3
SUSE Linux Enterprise Micro: 5.3
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
openSUSE Leap: 15.4
ceph-test-debugsource: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-cephadm: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephadm: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-rook: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-modules-core: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-k8sevents: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-dashboard: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-grafana-dashboards: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-diskprediction-local: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-top: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-prometheus-alerts: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-common: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libradospp-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-shell: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rados-objclass-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-argparse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-debugsource: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:basesystem_module:15-SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
- cpe:2.3:a:suse:ceph-test-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-test-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-test:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-cephadm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephadm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-rook:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-modules-core:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-k8sevents:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-dashboard:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-grafana-dashboards:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-diskprediction-local:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-top:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-prometheus-alerts:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-immutable-object-cache:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-radosgw:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rados-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-radosgw-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rgw-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mon-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mon:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rados:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-mirror-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-mirror:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rgw:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rbd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mds-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-ceph-common:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-common:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-immutable-object-cache-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-nbd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-cephfs-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libradospp-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-cephfs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-osd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-nbd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-shell:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-common-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-mirror-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-mirror:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw2:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-fuse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rados-objclass-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rbd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-ceph-argparse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-fuse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-fuse-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-osd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs2:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mds:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-fuse-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd1-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd1:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados2:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2023/suse-su-20231581-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Incorrect default permissions
EUVDB-ID: #VU72630
Risk: Low
CVSSv4.0: 7.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/U:Clear]
CVE-ID: CVE-2022-3650
CWE-ID:
CWE-276 - Incorrect Default Permissions
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to ceph-crash.service runs the ceph-crash Python script with root privileges. The script is operating in the directory /var/lib/ceph/crash which is controlled by the unprivileged ceph user. A local user can inject arbitrary data into the crash dump and force the privileged script to write that file into an arbitrary location on the system, resulting in privilege escalation.
Update the affected package ceph to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro for Rancher: 5.3
SUSE Linux Enterprise Server for SAP Applications 15: SP4
SUSE Linux Enterprise Server 15: SP4
SUSE Linux Enterprise Real Time 15: SP4
SUSE Linux Enterprise High Performance Computing 15: SP4
SUSE Linux Enterprise Desktop 15: SP4
Basesystem Module: 15-SP4
openSUSE Leap Micro: 5.3
SUSE Linux Enterprise Micro: 5.3
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
openSUSE Leap: 15.4
ceph-test-debugsource: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-cephadm: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephadm: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-rook: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-modules-core: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-k8sevents: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-dashboard: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-grafana-dashboards: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-diskprediction-local: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-top: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-prometheus-alerts: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-common: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libradospp-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-shell: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rados-objclass-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-argparse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-debugsource: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:basesystem_module:15-SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
- cpe:2.3:a:suse:ceph-test-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-test-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-test:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-cephadm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephadm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-rook:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-modules-core:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-k8sevents:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-dashboard:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-grafana-dashboards:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-diskprediction-local:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-top:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-prometheus-alerts:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-immutable-object-cache:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-radosgw:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rados-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-radosgw-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rgw-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mon-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mon:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rados:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-mirror-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-mirror:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rgw:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rbd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mds-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-ceph-common:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-common:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-immutable-object-cache-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-nbd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-cephfs-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libradospp-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-cephfs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-osd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-nbd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-shell:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-common-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-mirror-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-mirror:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw2:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-fuse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rados-objclass-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rbd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-ceph-argparse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-fuse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-fuse-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-osd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs2:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mds:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-fuse-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd1-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd1:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados2:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2023/suse-su-20231581-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Input validation error
EUVDB-ID: #VU74055
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-3854
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when handling URL on RGW backends. A remote attacker can pass specially crafted URL to the application and perform a denial of service (DoS) attack.
MitigationUpdate the affected package ceph to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Micro for Rancher: 5.3
SUSE Linux Enterprise Server for SAP Applications 15: SP4
SUSE Linux Enterprise Server 15: SP4
SUSE Linux Enterprise Real Time 15: SP4
SUSE Linux Enterprise High Performance Computing 15: SP4
SUSE Linux Enterprise Desktop 15: SP4
Basesystem Module: 15-SP4
openSUSE Leap Micro: 5.3
SUSE Linux Enterprise Micro: 5.3
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
openSUSE Leap: 15.4
ceph-test-debugsource: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-cephadm: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephadm: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-rook: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-modules-core: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-k8sevents: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-dashboard: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-grafana-dashboards: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-diskprediction-local: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-top: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-prometheus-alerts: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-radosgw-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mon: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rados: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephsqlite-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-mirror: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rgw: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-common: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-immutable-object-cache-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libradospp-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-cephfs: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mgr-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-nbd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-shell: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-common-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
cephfs-mirror: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-base-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rados-objclass-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-rbd-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
python3-ceph-argparse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-fuse-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-osd: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
libcephfs2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-mds: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librgw-devel: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
rbd-fuse-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-debugsource: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2-debuginfo: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librbd1: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
librados2: before 16.2.11.58+g38d6afd3b78-150400.3.6.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:basesystem_module:15-SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:opensuse_leap_micro:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
- cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
- cpe:2.3:a:suse:ceph-test-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-test-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-test:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-cephadm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephadm:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-rook:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-modules-core:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-k8sevents:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-dashboard:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-grafana-dashboards:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-diskprediction-local:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-top:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-prometheus-alerts:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-immutable-object-cache:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-radosgw:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rados-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-radosgw-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rgw-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mon-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mon:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rados:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-mirror-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephsqlite-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-mirror:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rgw:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rbd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mds-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-ceph-common:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-common:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-immutable-object-cache-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-nbd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-cephfs-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libradospp-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-cephfs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-osd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mgr-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-nbd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-shell:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-base:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-common-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-mirror-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:cephfs-mirror:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw2:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-fuse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rados-objclass-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-rbd-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python3-ceph-argparse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-fuse:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-fuse-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-osd:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libcephfs2:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-mds:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librgw-devel:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:rbd-fuse-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd1-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:ceph-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados2-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librbd1:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:librados2:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2023/suse-su-20231581-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
