Back to bug 2136909
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Sage McTaggart | 2022-10-21 20:27:30 UTC | CC | security-response-team | |
| Sage McTaggart | 2022-10-21 20:28:03 UTC | Alias | CVE-2022-3650 | |
| Summary | EMBARGOED Ceph: ceph-crash.service allows local ceph user to root exploit | EMBARGOED CVE-2022-3650 Ceph: ceph-crash.service allows local ceph user to root exploit | ||
| Sage McTaggart | 2022-10-21 20:28:22 UTC | Depends On | 2136911, 2136913, 2136912 | |
| Sage McTaggart | 2022-10-21 20:34:21 UTC | CC | branto, eglynn, gfidente, jdurgin, jjoyce, lhh, madam, mburns, mgarciac, mhicks, muagarwa, spower | |
| Sage McTaggart | 2022-10-21 20:40:37 UTC | Depends On | 2136921, 2136918, 2136917, 2136919, 2136920 | |
| Sage McTaggart | 2022-10-25 15:20:21 UTC | CC | danmick, david, fedora, go-sig, i, josef, kkeithle, loic, ocs-bugs, ramkrsna, steve | |
| Group | qe_staff, security | |||
| Summary | EMBARGOED CVE-2022-3650 Ceph: ceph-crash.service allows local ceph user to root exploit | CVE-2022-3650 Ceph: ceph-crash.service allows local ceph user to root exploit | ||
| Deadline | 2022-10-25 | |||
| Sage McTaggart | 2022-10-25 15:30:56 UTC | Depends On | 2137599, 2137598 | |
| Sage McTaggart | 2022-10-25 15:33:32 UTC | Doc Text | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local user to escalate privileges to root in the form of a crash dump, and dump privileged information. This can also result in a denial of service. This can result in a loss of confidentiality, integrity, and availability. | |
| Sage McTaggart | 2022-10-25 15:34:20 UTC | Depends On | 2137603, 2137601, 2137608, 2137609, 2137605, 2137602, 2137606, 2137604, 2137607 | |
| Sage McTaggart | 2022-10-25 15:48:58 UTC | Blocks | 2129142 | |
| Paige Jung | 2022-10-25 16:09:13 UTC | Doc Text | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local user to escalate privileges to root in the form of a crash dump, and dump privileged information. This can also result in a denial of service. This can result in a loss of confidentiality, integrity, and availability. | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information. This issue can lead to a denial of service, loss of confidentiality, integrity, and availability. |
| Stoyan Nikolov | 2022-10-27 10:24:55 UTC | CC | arachman, lveyde, michal.skrivanek, mperina, sbonazzo | |
| Stoyan Nikolov | 2022-10-27 10:25:35 UTC | Depends On | 2138130 | |
| Stoyan Nikolov | 2022-10-27 10:37:46 UTC | Depends On | 2138130 | |
| Stoyan Nikolov | 2022-10-27 10:48:25 UTC | CC | arachman, lveyde, michal.skrivanek, mperina, sbonazzo | |
| Mudit Agarwal | 2022-10-31 03:03:36 UTC | Depends On | 2138694 | |
| Red Hat Bugzilla | 2022-12-31 23:28:57 UTC | CC | branto | |
| Red Hat Bugzilla | 2023-01-01 05:32:18 UTC | CC | amctagga | |
| Red Hat Bugzilla | 2023-01-01 05:47:05 UTC | CC | flucifre | |
| Red Hat Bugzilla | 2023-01-01 05:52:21 UTC | CC | mhackett | |
| Red Hat Bugzilla | 2023-01-01 06:01:49 UTC | CC | bniver | |
| Red Hat Bugzilla | 2023-01-01 08:31:10 UTC | CC | kkeithle | |
| Red Hat Bugzilla | 2023-01-01 08:33:37 UTC | CC | mbenjamin | |
| Red Hat Bugzilla | 2023-01-01 08:42:29 UTC | CC | sostapov | |
| Red Hat Bugzilla | 2023-01-01 08:47:07 UTC | CC | vereddy | |
| Alasdair Kergon | 2023-01-04 05:43:50 UTC | CC | sostapov | |
| Alasdair Kergon | 2023-01-04 06:11:25 UTC | CC | bniver | |
| Alasdair Kergon | 2023-01-04 06:19:28 UTC | CC | mbenjamin | |
| Alasdair Kergon | 2023-01-04 06:29:04 UTC | CC | vereddy | |
| Alasdair Kergon | 2023-01-04 06:43:51 UTC | CC | flucifre | |
| Alasdair Kergon | 2023-01-04 06:49:10 UTC | CC | kkeithle | |
| Alasdair Kergon | 2023-01-04 11:29:24 UTC | CC | mhackett | |
| Pedro Sampaio | 2023-01-13 17:22:32 UTC | Blocks | 2160786 | |
| Red Hat Bugzilla | 2023-01-31 23:37:06 UTC | CC | madam | |
| Nick Tait | 2023-02-01 23:19:10 UTC | Doc Text | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information. This issue can lead to a denial of service, loss of confidentiality, integrity, and availability. | A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information. This issue can lead to loss of confidentiality, integrity, and availability. |
| errata-xmlrpc | 2023-02-28 10:05:15 UTC | Link ID | Red Hat Product Errata RHSA-2023:0980 | |
| Product Security DevOps Team | 2023-02-28 14:14:20 UTC | Resolution | --- | ERRATA |
| Status | NEW | CLOSED | ||
| Last Closed | 2023-02-28 14:14:20 UTC | |||
| errata-xmlrpc | 2023-03-07 10:23:44 UTC | Link ID | Red Hat Product Errata RHBA-2023:1087 |
Back to bug 2136909