7.6
Élevée
CVE-2018-10923 It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node
Description
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| glusterfs | Versions non publiées |
Autres CVE de glusterfs
Les 12 CVE de glusterfs →
CVE-2018-10930
A flaw was found in RPC request using gfs3_rename_req in glusterfs server
6.5
Moyenne
CVE-2018-10929
A flaw was found in RPC request using gfs2_create_req in glusterfs server
8.8
Élevée
CVE-2018-10927
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server
7.1
Élevée
CVE-2018-10926
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server
8.1
Élevée