Every CVE Search/ Get API key

CVE-2022-0670

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner...

9.1 CriticalFix available

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

1.28%Up 0.4 points since Jul 26, 2022
90%50%10%1%

What each source reports

NVD Score used 9.1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
CVE-2022-0670
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-863
Updated
2026-11-02
CVE List No score

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
CVE-2022-0670
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2022-15759 No score

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
EUVD-2022-15759
Updated
2026-11-03
GitHub AdvisoriesGHSA-g5mr-95rv-q4hc 9.1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner...

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
GHSA-g5mr-95rv-q4hc
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVALPINE-CVE-2022-0670 9.1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
ALPINE-CVE-2022-0670
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-03
OSVAZL-10387 9.1

CVE-2022-0670 affecting package ceph for versions less than 16.2.10-1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
AZL-10387
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 14 moreShow less
OSVAZL-38305 9.1

CVE-2022-0670 affecting package ceph for versions less than 18.2.1-1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
AZL-38305
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2022-0670 9.1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
DEBIAN-CVE-2022-0670
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-03
OSVOESA-2022-2125 9.1

ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.

Security Fix(es):

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.(CVE-2022-0670)

Record
OESA-2022-2125
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2022:5997 8.1

Red Hat Security Advisory: Red Hat Ceph Storage Security, Bug Fix, and Enhancement Update

Record
RHSA-2022:5997
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-0670 9.1

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
UBUNTU-CVE-2022-0670
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVBIT-ceph-2022-0670 No score

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
BIT-ceph-2022-0670
Updated
2026-11-02
OSV No score

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.

Record
CVE-2022-0670
Weakness
CWE-863
Updated
2026-11-02
OSVMGASA-2023-0139 No score

Updated ceph packages fix security vulnerability

Openstack manilla owning a Ceph File system "share", enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. (CVE-2022-0670) Privilege escalation and privileged information disclosure (CVE-2022-3650)

Record
MGASA-2023-0139
Updated
2026-11-02
OSVopenSUSE-SU-2024:12662-1 No score

ceph-16.2.11.58+g38d6afd3b78-1.1 on GA media

These are all security issues fixed in the ceph-16.2.11.58+g38d6afd3b78-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12662-1
Updated
2026-11-02
OSVSUSE-SU-2023:1580-1 No score

Security update for ceph

This update for ceph fixes the following issues:

Security issues fixed:

  • CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837).
  • CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#1204430).
  • CVE-2022-3854: Fixed possible DoS issue in ceph URL processing on RGW backends (bsc#1205025).

Bug fixes:

  • osd, tools, kv: non-aggressive, on-line trimming of accumulated dups (bsc#1199183).
  • ceph-volume: fix fast device alloc size on mulitple device (bsc#1200262).
  • cephadm: update monitoring container images (bsc#1200501).
  • mgr/dashboard: prevent alert redirect (bsc#1200978).
  • mgr/volumes: Add subvolumegroup resize cmd (bsc#1201797).
  • monitoring/ceph-mixin: add RGW host to label info (bsc#1201976).
  • mgr/dashboard: enable addition of custom Prometheus alerts (bsc#1202077).
  • python-common: Add 'KB' to supported suffixes in SizeMatcher (bsc#1203375).
  • mgr/dashboard: fix rgw connect when using ssl (bsc#1205436).
  • ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS (bsc#1202292).
  • cephfs-shell: move source to separate subdirectory (bsc#1201604).

Fix in previous release:

  • mgr/cephadm: try to get FQDN for configuration files (bsc#1196046).
  • When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748).
  • OSD marked down causes wrong backfill_toofull (bsc#1188911).
  • cephadm: Fix iscsi client caps (allow mgr <service status> calls) (bsc#1192838).
  • mgr/cephadm: fix and improve osd draining (bsc#1200317).
  • add iscsi and nfs to upgrade process (bsc#1206158).
  • mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments (bsc#1192840).
Record
SUSE-SU-2023:1580-1
Updated
2026-11-02
OSVSUSE-SU-2023:1581-1 No score

Security update for ceph

This update for ceph fixes the following issues:

Security issues fixed:

  • CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837).
  • CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#1204430).
  • CVE-2022-3854: Fixed possible DoS issue in ceph URL processing on RGW backends (bsc#1205025).

Bug fixes:

  • osd, tools, kv: non-aggressive, on-line trimming of accumulated dups (bsc#1199183).
  • ceph-volume: fix fast device alloc size on mulitple device (bsc#1200262).
  • cephadm: update monitoring container images (bsc#1200501).
  • mgr/dashboard: prevent alert redirect (bsc#1200978).
  • mgr/volumes: Add subvolumegroup resize cmd (bsc#1201797).
  • monitoring/ceph-mixin: add RGW host to label info (bsc#1201976).
  • mgr/dashboard: enable addition of custom Prometheus alerts (bsc#1202077).
  • python-common: Add 'KB' to supported suffixes in SizeMatcher (bsc#1203375).
  • mgr/dashboard: fix rgw connect when using ssl (bsc#1205436).
  • ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS (bsc#1202292).
  • cephfs-shell: move source to separate subdirectory (bsc#1201604).

Fix in previous release:

  • mgr/cephadm: try to get FQDN for configuration files (bsc#1196046).
  • When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748).
  • OSD marked down causes wrong backfill_toofull (bsc#1188911).
  • cephadm: Fix iscsi client caps (allow mgr <service status> calls) (bsc#1192838).
  • mgr/cephadm: fix and improve osd draining (bsc#1200317).
  • add iscsi and nfs to upgrade process (bsc#1206158).
  • mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments (bsc#1192840).
Record
SUSE-SU-2023:1581-1
Updated
2026-11-02
OSVSUSE-SU-2023:1581-2 No score

Security update for ceph

This update for ceph fixes the following issues:

Security issues fixed:

  • CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837).
  • CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#1204430).
  • CVE-2022-3854: Fixed possible DoS issue in ceph URL processing on RGW backends (bsc#1205025).

Bug fixes:

  • osd, tools, kv: non-aggressive, on-line trimming of accumulated dups (bsc#1199183).
  • ceph-volume: fix fast device alloc size on mulitple device (bsc#1200262).
  • cephadm: update monitoring container images (bsc#1200501).
  • mgr/dashboard: prevent alert redirect (bsc#1200978).
  • mgr/volumes: Add subvolumegroup resize cmd (bsc#1201797).
  • monitoring/ceph-mixin: add RGW host to label info (bsc#1201976).
  • mgr/dashboard: enable addition of custom Prometheus alerts (bsc#1202077).
  • python-common: Add 'KB' to supported suffixes in SizeMatcher (bsc#1203375).
  • mgr/dashboard: fix rgw connect when using ssl (bsc#1205436).
  • ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS (bsc#1202292).
  • cephfs-shell: move source to separate subdirectory (bsc#1201604).

Fix in previous release:

  • mgr/cephadm: try to get FQDN for configuration files (bsc#1196046).
  • When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748).
  • OSD marked down causes wrong backfill_toofull (bsc#1188911).
  • cephadm: Fix iscsi client caps (allow mgr <service status> calls) (bsc#1192838).
  • mgr/cephadm: fix and improve osd draining (bsc#1200317).
  • add iscsi and nfs to upgrade process (bsc#1206158).
  • mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments (bsc#1192840).
Record
SUSE-SU-2023:1581-2
Updated
2026-11-02
OSVSUSE-SU-2023:1584-1 No score

Security update for ceph

This update for ceph fixes the following issues:

Security issues fixed:

  • CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837).
  • CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#1204430).
  • CVE-2022-3854: Fixed possible DoS issue in ceph URL processing on RGW backends (bsc#1205025).

Bug fixes:

  • osd, tools, kv: non-aggressive, on-line trimming of accumulated dups (bsc#1199183).
  • ceph-volume: fix fast device alloc size on mulitple device (bsc#1200262).
  • cephadm: update monitoring container images (bsc#1200501).
  • mgr/dashboard: prevent alert redirect (bsc#1200978).
  • mgr/volumes: Add subvolumegroup resize cmd (bsc#1201797).
  • monitoring/ceph-mixin: add RGW host to label info (bsc#1201976).
  • mgr/dashboard: enable addition of custom Prometheus alerts (bsc#1202077).
  • python-common: Add 'KB' to supported suffixes in SizeMatcher (bsc#1203375).
  • mgr/dashboard: fix rgw connect when using ssl (bsc#1205436).
  • ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS (bsc#1202292).
  • cephfs-shell: move source to separate subdirectory (bsc#1201604).

Fix in previous release:

  • mgr/cephadm: try to get FQDN for configuration files (bsc#1196046).
  • When an RBD is mapped, it is attempted to be deployed as an OSD. (bsc#1187748).
  • OSD marked down causes wrong backfill_toofull (bsc#1188911).
  • cephadm: Fix iscsi client caps (allow mgr <service status> calls) (bsc#1192838).
  • mgr/cephadm: fix and improve osd draining (bsc#1200317).
  • add iscsi and nfs to upgrade process (bsc#1206158).
  • mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments (bsc#1192840).
Record
SUSE-SU-2023:1584-1
Updated
2026-11-02
OSVUSN-6063-1 No score

ceph vulnerabilities

Mark Kirkwood discovered that Ceph incorrectly handled certain key lengths. An attacker could possibly use this issue to create non-random encryption keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3979)

It was discovered that Ceph incorrectly handled the volumes plugin. An attacker could possibly use this issue to obtain access to any share. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-0670)

It was discovered that Ceph incorrectly handled crash dumps. A local attacker could possibly use this issue to escalate privileges to root. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-3650)

It was discovered that Ceph incorrectly handled URL processing on RGW backends. An attacker could possibly use this issue to cause RGW to crash, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-3854)

Record
USN-6063-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Alpine:v3.13
 15.0.0 up to 15.2.17-r0
15.2.17-r0
ceph16
Alpine:v3.17
 before 16.2.10-r0
16.2.10-r0
ceph16
Alpine:v3.18
 before 16.2.10-r0
16.2.10-r0
ceph
Azure Linux:2
 before 16.2.10-1
16.2.10-1
ceph
Azure Linux:3
 before 18.2.1-1
18.2.1-1
ceph
Bitnami
 15.0.0 up to 15.2.17, 16.0.0 up to 16.2.10, 17.0.0 up to 17.2.2
15.2.1716.2.1017.2.2
ceph
Debian:12
 before 16.2.10+ds-1
16.2.10+ds-1
ceph
Debian:13
 before 16.2.10+ds-1
16.2.10+ds-1
ceph
Debian:14
 before 16.2.10+ds-1
16.2.10+ds-1
ceph
Debian:11
From an advisory covering 2 CVEs
 before 14.2.21-1+deb11u2, plus listed versions
14.2.21-114.2.21-1+deb11u1
14.2.21-1+deb11u2
Show 153 moreShow less
Affected packages
PackageAffectedFixed
ceph
Mageia:8
From an advisory covering 2 CVEs
 before 15.2.17-1.mga8
15.2.17-1.mga8
ceph
openEuler:22.03-LTS
 before 16.2.7-10.oe2203
16.2.7-10.oe2203
ceph
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-base
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-base-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-common
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-common-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-debugsource
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-grafana-dashboards
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mds-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-cephadm
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-dashboard
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-modules-core
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mgr-rook
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mon
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mon-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-osd-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-prometheus-alerts
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-selinux
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-test
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-test-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
cephadm
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libcephfs-devel
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libcephfs2
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libcephfs2-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libcephsqlite
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librados-devel
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librados-devel-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librados2
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librados2-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libradospp-devel
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libradosstriper1
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librbd-devel
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librbd1
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librbd1-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librgw-devel
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librgw2
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
librgw2-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-ceph-argparse
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-ceph-common
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-cephfs
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-rados
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-rados-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-rbd
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-rbd-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-rgw
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
python3-rgw-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-osd
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-fuse
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-immutable-object-cache
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mds
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-mib
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-radosgw
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph-resource-agents
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
cephfs-mirror
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
cephfs-top
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
rbd-mirror
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
rbd-nbd
Red Hat:ceph_storage:5.2::el8
 before 2:16.2.8-84.el8cp
2:16.2.8-84.el8cp
ceph
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-base
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-common
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-debugsource
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-grafana-dashboards
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-cephadm
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-dashboard
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-modules-core
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mgr-rook
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mon
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-prometheus-alerts
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-selinux
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-test
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
cephadm
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libcephfs-devel
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libcephfs2
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libcephsqlite
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librados-devel
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librados2
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librados2-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libradospp-devel
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libradosstriper1
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librbd-devel
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librbd1
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librgw-devel
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librgw2
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-ceph-common
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-cephfs
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-rados
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-rbd
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-rgw
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-osd
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-fuse
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-mib
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph-resource-agents
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
cephfs-top
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
rbd-nbd
Red Hat:ceph_storage:5.2::el9
 before 2:16.2.8-84.el9cp
2:16.2.8-84.el9cp
ceph
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150300.5.7.1
16.2.11.58+g38d6afd3b78-150300.5.7.1
ceph
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150300.5.7.1
16.2.11.58+g38d6afd3b78-150300.5.7.1
ceph
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150300.5.7.1
16.2.11.58+g38d6afd3b78-150300.5.7.1
ceph
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150400.3.6.1
16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150400.3.6.1
16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph
openSUSE:Leap Micro 5.3
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150400.3.6.1
16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150400.3.6.1
16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph-test
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150400.3.6.1
16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150400.3.6.1
16.2.11.58+g38d6afd3b78-150400.3.6.1
ceph
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 16.2.11.58+g38d6afd3b78-150300.3.6.1
16.2.11.58+g38d6afd3b78-150300.3.6.1
ceph
Ubuntu:20.04:LTS
 before 15.2.17-0ubuntu0.20.04.3, plus listed versions
14.2.2-0ubuntu314.2.2-0ubuntu414.2.4-0ubuntu114.2.4-0ubuntu214.2.4-0ubuntu3
Show 21 moreShow less
15.1.0-0ubuntu215.1.0-0ubuntu315.1.1-0ubuntu115.2.0-0ubuntu115.2.0-0ubuntu215.2.1-0ubuntu115.2.1-0ubuntu215.2.3-0ubuntu0.20.04.115.2.3-0ubuntu0.20.04.215.2.5-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.215.2.8-0ubuntu0.20.04.115.2.11-0ubuntu0.20.04.215.2.12-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.215.2.14-0ubuntu0.20.04.115.2.14-0ubuntu0.20.04.215.2.16-0ubuntu0.20.04.115.2.17-0ubuntu0.20.04.1
15.2.17-0ubuntu0.20.04.3
ceph
Ubuntu:22.04:LTS
 before 17.2.5-0ubuntu0.22.04.3, plus listed versions
16.2.6-0ubuntu116.2.6-0ubuntu216.2.6-0ubuntu316.2.7-0ubuntu116.2.7-0ubuntu4
Show 6 moreShow less
17.1.0-0ubuntu117.1.0-0ubuntu217.1.0-0ubuntu317.2.0-0ubuntu0.22.04.117.2.0-0ubuntu0.22.04.217.2.5-0ubuntu0.22.04.2
17.2.5-0ubuntu0.22.04.3
ceph
Ubuntu:18.04:LTS
From an advisory covering 4 CVEs
 before 12.2.13-0ubuntu0.18.04.11, plus listed versions
12.2.0-0ubuntu112.2.1-0ubuntu112.2.2-0ubuntu112.2.2-0ubuntu212.2.4-0ubuntu1
Show 19 moreShow less
12.2.4-0ubuntu1.112.2.7-0ubuntu0.18.04.112.2.8-0ubuntu0.18.04.112.2.8-0ubuntu0.18.04.212.2.11-0ubuntu0.18.04.112.2.11-0ubuntu0.18.04.212.2.12-0ubuntu0.18.04.112.2.12-0ubuntu0.18.04.212.2.12-0ubuntu0.18.04.312.2.12-0ubuntu0.18.04.412.2.12-0ubuntu0.18.04.512.2.13-0ubuntu0.18.04.212.2.13-0ubuntu0.18.04.312.2.13-0ubuntu0.18.04.412.2.13-0ubuntu0.18.04.512.2.13-0ubuntu0.18.04.612.2.13-0ubuntu0.18.04.712.2.13-0ubuntu0.18.04.812.2.13-0ubuntu0.18.04.10
12.2.13-0ubuntu0.18.04.11
ceph
Ubuntu:20.04:LTS
From an advisory covering 4 CVEs
 before 15.2.17-0ubuntu0.20.04.3, plus listed versions
14.2.2-0ubuntu314.2.2-0ubuntu414.2.4-0ubuntu114.2.4-0ubuntu214.2.4-0ubuntu3
Show 21 moreShow less
15.1.0-0ubuntu215.1.0-0ubuntu315.1.1-0ubuntu115.2.0-0ubuntu115.2.0-0ubuntu215.2.1-0ubuntu115.2.1-0ubuntu215.2.3-0ubuntu0.20.04.115.2.3-0ubuntu0.20.04.215.2.5-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.215.2.8-0ubuntu0.20.04.115.2.11-0ubuntu0.20.04.215.2.12-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.215.2.14-0ubuntu0.20.04.115.2.14-0ubuntu0.20.04.215.2.16-0ubuntu0.20.04.115.2.17-0ubuntu0.20.04.1
15.2.17-0ubuntu0.20.04.3
ceph
Ubuntu:22.04:LTS
From an advisory covering 4 CVEs
 before 17.2.5-0ubuntu0.22.04.3, plus listed versions
16.2.6-0ubuntu116.2.6-0ubuntu216.2.6-0ubuntu316.2.7-0ubuntu116.2.7-0ubuntu4
Show 6 moreShow less
17.1.0-0ubuntu117.1.0-0ubuntu217.1.0-0ubuntu317.2.0-0ubuntu0.22.04.117.2.0-0ubuntu0.22.04.217.2.5-0ubuntu0.22.04.2
17.2.5-0ubuntu0.22.04.3

History

History
RecordedChangedSources
affected, factsOSV
affected, aliases, referencesOSV
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-0670 is a critical vulnerability (CVSS 9.1) in Ceph, published July 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. Fixed in ceph 15.2.17-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 5 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open