Wind River Support Network

HomeDefectsLIN8-9339
Fixed

LIN8-9339 : Security Advisory - glusterfs - CVE-2018-10841

Created: Jun 29, 2018    Updated: Dec 21, 2018
Resolved Date: Oct 29, 2018
Found In Version: 8.0.0.26
Fix Version: 8.0.0.28
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.

https://nvd.nist.gov/vuln/detail/CVE-2018-10841

Other Downloads


CVEs


Live chat
Online