Wind River Support Network

HomeDefectsLIN9-7771
Fixed

LIN9-7771 : Security Advisory - glusterfs - CVE-2018-14653

Created: Nov 19, 2018    Updated: Jan 2, 2019
Resolved Date: Nov 22, 2018
Found In Version: unknown
Fix Version: 9.0.0.19
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14653

Other Downloads


CVEs


Live chat
Online