{"action":"Upgrade ceph to 16.2.10+ds-4 or later.","affected":[{"fixed":"16.2.10+ds-4","introduced":"0"}],"component":"ceph","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["16.2.10+ds-4"],"id":"tcs_01M5NGVXQW90XKZA6SBQSWBGQ2","modified_at":"2026-11-03T08:02:22.091323248Z","published_at":"2023-01-17T19:15:11.433Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-3650","https://security-tracker.debian.org/tracker/CVE-2022-3650"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-3650","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-3650"}],"summary":"A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information."}