CVE-2018-10923

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-10923
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10923.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-10923
Downstream
Related
Published
2018-09-04T14:29:00.597Z
Modified
2026-03-15T22:17:16.786236Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.

References

Affected packages

Git / github.com/gluster/glusterfs

Affected ranges

Type
GIT
Repo
https://github.com/gluster/glusterfs
Events
Introduced
c8c56b9a53471792a126f8e46f32ce7190eac10c
Fixed
fe5b6bc8522b3539a97765b243ad37ef227c05b6
Introduced
b4f4480094b7c3ebda3319df0c3f96efd08b2176
Fixed
5c2548456424b99d41fff2a7468660ba7c0da0aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a85a221c92f422dedde62832e6cd6e66cae2722
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2e1e4168ab6b6b3ebe9e3dfb227fb7631e5c1aa4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c6d4289dad6622e311c312b609a52106909f7d74
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3fadf5cc41d5ea3195d2228d23e890f27fc22f87
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a92e9e8e8ae6b97db8e0c1fb8268aef734ab48b4
Database specific 
{
    "versions": [
        {
            "introduced": "3.12.0"
        },
        {
            "fixed": "3.12.14"
        },
        {
            "introduced": "4.1.0"
        },
        {
            "fixed": "4.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.0"
        }
    ]
}

Affected versions

v3.*
v3.12.0
v3.12.1
v3.12.10
v3.12.11
v3.12.12
v3.12.13
v3.12.2
v3.12.3
v3.12.4
v3.12.5
v3.12.6
v3.12.7
v3.12.8
v3.12.9
v4.*
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.5
v4.1.6
v4.1.7

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10923.json"