Wind River Support Network

HomeDefectsLIN8-9196
Fixed

LIN8-9196 : Security Advisory - glusterfs - CVE-2018-1088

Created: May 15, 2018    Updated: Dec 3, 2018
Resolved Date: May 24, 2018
Found In Version: 8.0.0.25
Fix Version: 8.0.0.26
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.

https://nvd.nist.gov/vuln/detail/CVE-2018-1088

Other Downloads


CVEs


Live chat
Online