← Back

CVE-2018-10930

nvd nist
Published: Sep 4, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume.

Affected (9)

Show all products
Gluster: Glusterfs · Redhat: Enterprise Linux, Enterprise Linux Server, Virtualization, Virtualization Host · Debian: Debian Linux · Opensuse: Leap
Gluster
1 product
Glusterfs
Redhat
4 products
Enterprise Linux
Enterprise Linux Server
Virtualization
Virtualization Host
Debian
1 product
Debian Linux
Opensuse
1 product
Leap
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Gluster
Glusterfs
From 3.12 to 3.12.14
Glusterfs
From 4.1 to 4.1.4
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Linux
Version 6.0
Enterprise Linux Server
Version 7.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 8.0
Debian Linux
Version 9.0
Configuration D
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Virtualization
Version 4.0
Virtualization Host
Version 4.0
Running on/withPlatform Versions
Redhat
Enterprise Linux
Version 7.0
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Leap
Version 15.1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingPatchThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.