7.6
High
CVE-2018-10923 It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node
Description
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glusterfs | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- RHSA-2018:2607 access.redhat.com
- [debian-lts-announce] 20180920 [SECURITY] [DLA 1510-1] glusterfs security update lists.debian.org
- RHSA-2018:2608 access.redhat.com
- RHSA-2018:3470 access.redhat.com
- GLSA-201904-06 security.gentoo.org
- openSUSE-SU-2020:0079 lists.opensuse.org
- [debian-lts-announce] 20211101 [SECURITY] [DLA 2806-1] glusterfs security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of glusterfs
The 12 CVEs of glusterfs →
CVE-2018-10930
A flaw was found in RPC request using gfs3_rename_req in glusterfs server
6.5
Medium
CVE-2018-10929
A flaw was found in RPC request using gfs2_create_req in glusterfs server
8.8
High
CVE-2018-10927
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server
7.1
High
CVE-2018-10926
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server
8.1
High