Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-10914

Опубликовано: 04 сент. 2018
Источник: debian

Описание

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
glusterfsfixed4.1.4-1package

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=1607617

  • https://github.com/gluster/glusterfs/commit/13298d2b3893edb5d147ea3bcb9902ee5be4b3ad

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.

CVSS3: 5.5
redhat
больше 7 лет назад

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.

CVSS3: 6.5
nvd
больше 7 лет назад

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.

CVSS3: 6.5
github
почти 4 года назад

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.

suse-cvrf
около 6 лет назад

Security update for glusterfs