6.5
Medium
CVE-2018-10911 A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values
Description
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacker could use this flaw to read memory from other locations into the stored dict value.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glusterfs: | Versions not published |
References
- review.gluster.org review.gluster.org
- RHSA-2018:2607 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20180920 [SECURITY] [DLA 1510-1] glusterfs security update lists.debian.org
- RHSA-2018:2608 access.redhat.com
- RHSA-2018:3470 access.redhat.com
- RHSA-2018:2892 access.redhat.com
- RHSA-2018:3242 access.redhat.com
- GLSA-201904-06 security.gentoo.org
- openSUSE-SU-2020:0079 lists.opensuse.org
- [debian-lts-announce] 20211101 [SECURITY] [DLA 2806-1] glusterfs security update lists.debian.org
Timeline
- Published
- Last modified