Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

nvd Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2018-10926

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 04 сСнт. 2018
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: nvd
CVSS3: 8.1
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

ОписаниС

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

УязвимыС ΠΊΠΎΠ½Ρ„ΠΈΠ³ΡƒΡ€Π°Ρ†ΠΈΠΈ

ΠšΠΎΠ½Ρ„ΠΈΠ³ΡƒΡ€Π°Ρ†ΠΈΡ 1

Одно из

cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
ΠšΠΎΠ½Ρ„ΠΈΠ³ΡƒΡ€Π°Ρ†ΠΈΡ 2

Одно из

cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*
ВСрсия ΠΎΡ‚ 3.12 (Π²ΠΊΠ»ΡŽΡ‡Π°Ρ) Π΄ΠΎ 3.12.14 (ΠΈΡΠΊΠ»ΡŽΡ‡Π°Ρ)
cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*
ВСрсия ΠΎΡ‚ 4.1 (Π²ΠΊΠ»ΡŽΡ‡Π°Ρ) Π΄ΠΎ 4.1.8 (ΠΈΡΠΊΠ»ΡŽΡ‡Π°Ρ)
ΠšΠΎΠ½Ρ„ΠΈΠ³ΡƒΡ€Π°Ρ†ΠΈΡ 3
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 84%
0.02599
Низкий

8.1 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Π”Π΅Ρ„Π΅ΠΊΡ‚Ρ‹

CWE-20
CWE-22

БвязанныС уязвимости

CVSS3: 8.8
ubuntu
ΠΏΠΎΡ‡Ρ‚ΠΈ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

CVSS3: 8.1
redhat
ΠΏΠΎΡ‡Ρ‚ΠΈ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

CVSS3: 8.8
debian
ΠΏΠΎΡ‡Ρ‚ΠΈ 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A flaw was found in RPC request using gfs3_mknod_req supported by glus ...

CVSS3: 8.8
github
большС 4 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

suse-cvrf
большС 6 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Security update for glusterfs

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 84%
0.02599
Низкий

8.1 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Π”Π΅Ρ„Π΅ΠΊΡ‚Ρ‹

CWE-20
CWE-22
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2018-10926