Wind River Support Network

HomeDefectsLIN9-7457
Fixed

LIN9-7457 : Security Advisory - glusterfs - CVE-2018-10904

Created: Sep 17, 2018    Updated: Dec 24, 2018
Resolved Date: Sep 19, 2018
Found In Version: 9.0.0.17
Fix Version: 9.0.0.18
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

It was found that glusterfs server does not properly sanitize file paths in the trusted.io-stats-dump extended attribute which is used by the debug/io-stats translator. Attacker can use this flaw to create files and execute arbitrary code. To exploit this attacker would require sufficient access to modify the extended attributes of files on a gluster volume.

https://nvd.nist.gov/vuln/detail/CVE-2018-10904

Other Downloads


CVEs


Live chat
Online