Wind River Support Network

HomeDefectsLIN9-6824
Fixed

LIN9-6824 : Security Advisory - glusterfs - CVE-2018-1112

Created: May 2, 2018    Updated: Dec 3, 2018
Resolved Date: May 14, 2018
Found In Version: 9.0.0.15
Fix Version: 9.0.0.16
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

https://nvd.nist.gov/vuln/detail/CVE-2018-1112

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube