Wind River Support Network

HomeDefectsLIN10-5027
Fixed

LIN10-5027 : Security Advisory - glusterfs - CVE-2018-14653

Created: Nov 19, 2018    Updated: Jan 2, 2019
Resolved Date: Nov 22, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.13
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14653

Other Downloads


CVEs


Live chat
Online