Wind River Support Network

HomeDefectsLIN10-3863
Fixed

LIN10-3863 : Security Advisory - glusterfs - CVE-2018-1112

Created: May 2, 2018    Updated: Dec 3, 2018
Resolved Date: May 20, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.8
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

https://nvd.nist.gov/vuln/detail/CVE-2018-1112

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube