Wind River Support Network

HomeDefectsLIN1018-2982
Fixed

LIN1018-2982 : Security Advisory - glusterfs - CVE-2018-14653

Created: Nov 18, 2018    Updated: Sep 13, 2022
Resolved Date: Jan 28, 2019
Found In Version: unknown
Fix Version: 10.18.44.4
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14653

CVEs


Live chat
Online