Wind River Support Network

HomeDefectsLIN8-9151
Fixed

LIN8-9151 : Security Advisory - glusterfs - CVE-2018-1112

Created: May 2, 2018    Updated: Dec 3, 2018
Resolved Date: May 24, 2018
Found In Version: 8.0.0.25
Fix Version: 8.0.0.26
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

https://nvd.nist.gov/vuln/detail/CVE-2018-1112

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube