Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-1730

Высокий

ALT-PU-2018-1730: package glusterfs3 update to version 3.12.9-alt1

Источник
errata.altlinux.org
Дата публикации
17.05.2018
Дата обновления
17.05.2018
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades glusterfs3 to version 3.12.9-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 8 лет назад

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

CVSS3: 8.3
redhat
больше 8 лет назад

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

CVSS3: 8.1
nvd
больше 8 лет назад

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

CVSS3: 8.1
debian
больше 8 лет назад

A privilege escalation flaw was found in gluster 3.x snapshot schedule ...

CVSS3: 8.1
github
больше 4 лет назад

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.