8.1
High
CVE-2018-10926 A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server
Description
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glusterfs | Versions not published |
Other CVEs of glusterfs
The 12 CVEs of glusterfs →
CVE-2018-10930
A flaw was found in RPC request using gfs3_rename_req in glusterfs server
6.5
Medium
CVE-2018-10929
A flaw was found in RPC request using gfs2_create_req in glusterfs server
8.8
High
CVE-2018-10924
It was discovered that fsync(2) system call in glusterfs client code leaks memory
5.3
Medium
CVE-2018-10928
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to…
8.8
High