Wind River Support Network

HomeDefectsLIN8-10100
Fixed

LIN8-10100 : Security Advisory - glusterfs - CVE-2018-14653

Created: Nov 19, 2018    Updated: Jan 2, 2019
Resolved Date: Nov 26, 2018
Found In Version: 8.0
Fix Version: 8.0.0.28
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14653

Other Downloads


CVEs


Live chat
Online