Name: CVE-2022-3650: Placement of User into Incorrect Group
Creator: Rapid7
Published: 2023-01-17T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-3650, CWE-842, CVSS 7.8, EPSS 0.00327

A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade ceph-immutable-object-cacheUpgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade ceph-radosgw-debuginfoUpgrade ceph-mibUpgrade ceph-baseUpgrade ceph-mon-debuginfoUpgrade python3-rbdUpgrade libradosstriper1Upgrade cephadm-ansibleUpgrade ceph-resource-agentsUpgrade ceph-mds-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python3-rbd-debuginfoUpgrade rbd-nbdUpgrade ceph-base-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libradospp-develUpgrade rbd-mirrorUpgrade libradosstriper1-debuginfoUpgrade ceph-test-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-selinuxUpgrade python3-radosUpgrade ceph-fuse-debuginfoUpgrade python3-ceph-commonUpgrade ceph-radosgwUpgrade librados-devel-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade librbd-develUpgrade libcephsqlite-debuginfoUpgrade cephadmUpgrade ceph-commonUpgrade librados-develUpgrade python3-rados-debuginfoUpgrade cephfs-topUpgrade librgw2Upgrade python3-ceph-argparseUpgrade ceph-debugsourceUpgrade cephfs-mirrorUpgrade libcephfs2Upgrade librgw2-debuginfoUpgrade librgw-develUpgrade libcephfs-develUpgrade ceph-common-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-cephfsUpgrade ceph-mdsUpgrade ceph-fuseUpgrade rbd-fuse-debuginfo	Mar 1, 2023	Jan 17, 2023
Debian	—	Upgrade ceph	Jul 30, 2024	Jan 17, 2023
Gentoo Linux	—	Upgrade sys-cluster/ceph.	Dec 27, 2023	Jan 17, 2023
Redhat_linux	—	Upgrade ceph-debugsourceUpgrade python3-radosUpgrade librgw-develUpgrade libcephfs2Upgrade python3-cephfs-debuginfoUpgrade librados-develUpgrade rbd-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-radosgwUpgrade librados-devel-debuginfoUpgrade ceph-commonUpgrade python3-cephfsUpgrade libcephfs-develUpgrade libcephsqlite-debuginfoUpgrade ceph-mdsUpgrade python3-rgwUpgrade ceph-fuse-debuginfoUpgrade ceph-grafana-dashboardsUpgrade cephfs-mirrorUpgrade rbd-nbd-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-ceph-commonUpgrade ceph-fuseUpgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-rbd-debuginfoUpgrade librgw2Upgrade ceph-selinuxUpgrade python3-rados-debuginfoUpgrade cephfs-topUpgrade python3-rbdUpgrade ceph-mon-debuginfoUpgrade ceph-immutable-object-cacheUpgrade librgw2-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-common-debuginfoUpgrade librbd-develUpgrade rbd-mirrorUpgrade ceph-base-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-mgr-debuginfoUpgrade ceph-baseUpgrade cephadmUpgrade ceph-resource-agentsUpgrade libradosstriper1Upgrade rbd-nbdUpgrade libradosstriper1-debuginfoUpgrade libradospp-develUpgrade ceph-mibUpgrade ceph-osd-debuginfoUpgrade cephadm-ansible	Mar 1, 2023	Jan 17, 2023
Suse	—	Upgrade ceph-radosgwUpgrade ceph-immutable-object-cacheUpgrade libcephfs-develUpgrade cephfs-mirrorUpgrade cephadmUpgrade libcephfs2Upgrade librbd1Upgrade cephfs-shellUpgrade libcephsqliteUpgrade librados-develUpgrade ceph-grafana-dashboardsUpgrade ceph-monUpgrade librbd-develUpgrade python3-radosUpgrade ceph-mdsUpgrade python3-ceph-commonUpgrade python3-ceph-argparseUpgrade rbd-fuseUpgrade librados2Upgrade ceph-mgr-dashboardUpgrade python3-cephfsUpgrade ceph-commonUpgrade librgw-develUpgrade librgw2Upgrade ceph-mgr-k8seventsUpgrade libradospp-develUpgrade libcephsqlite-develUpgrade python3-rgwUpgrade ceph-baseUpgrade cephfs-topUpgrade rbd-mirrorUpgrade ceph-mgrUpgrade ceph-mgr-modules-coreUpgrade rados-objclass-develUpgrade ceph-mgr-rookUpgrade ceph-prometheus-alertsUpgrade rbd-nbdUpgrade ceph-testUpgrade ceph-mgr-diskprediction-localUpgrade ceph-osdUpgrade cephUpgrade python3-rbdUpgrade ceph-mgr-cephadmUpgrade ceph-fuse	Mar 28, 2023	Jan 17, 2023
Ubuntu	—	Upgrade ceph-commonUpgrade ceph-baseUpgrade ceph	May 10, 2023	Jan 17, 2023

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence