8.1
Élevée
CVE-2018-10926 A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server
Description
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| glusterfs | Versions non publiées |
Références
- RHSA-2018:2607 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20180920 [SECURITY] [DLA 1510-1] glusterfs security update lists.debian.org
- RHSA-2018:2608 access.redhat.com
- RHSA-2018:3470 access.redhat.com
- GLSA-201904-06 security.gentoo.org
- openSUSE-SU-2020:0079 lists.opensuse.org
- [debian-lts-announce] 20211101 [SECURITY] [DLA 2806-1] glusterfs security update lists.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de glusterfs
Les 12 CVE de glusterfs →
CVE-2018-10930
A flaw was found in RPC request using gfs3_rename_req in glusterfs server
6.5
Moyenne
CVE-2018-10929
A flaw was found in RPC request using gfs2_create_req in glusterfs server
8.8
Élevée
CVE-2018-10924
It was discovered that fsync(2) system call in glusterfs client code leaks memory
5.3
Moyenne
CVE-2018-10928
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to…
8.8
Élevée