Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-10926

Опубликовано: 04 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.5
CVSS3: 8.8

Описание

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

4.1.4-1
disco

not-affected

4.1.4-1
eoan

not-affected

4.1.4-1
esm-apps/bionic

released

3.13.2-1ubuntu1+esm1
esm-apps/focal

not-affected

4.1.4-1
esm-apps/xenial

released

3.7.6-1ubuntu1+esm1
esm-infra-legacy/trusty

released

3.4.2-1ubuntu1+esm1
focal

not-affected

4.1.4-1

Показывать по

EPSS

Процентиль: 74%
0.00788
Низкий

6.5 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
больше 7 лет назад

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

CVSS3: 8.8
nvd
больше 7 лет назад

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

CVSS3: 8.8
debian
больше 7 лет назад

A flaw was found in RPC request using gfs3_mknod_req supported by glus ...

CVSS3: 8.8
github
больше 3 лет назад

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.

suse-cvrf
около 6 лет назад

Security update for glusterfs

EPSS

Процентиль: 74%
0.00788
Низкий

6.5 Medium

CVSS2

8.8 High

CVSS3