CVE-2018-10926
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-10926
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10926.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-10926
- Related
- Published
- 2018-09-04T15:29:00Z
- Modified
- 2024-09-18T02:37:13.479498Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in RPC request using gfs3mknodreq supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.
- References
-
- https://access.redhat.com/errata/RHSA-2018:2607
- https://access.redhat.com/errata/RHSA-2018:2608
- https://access.redhat.com/errata/RHSA-2018:3470
- https://security.gentoo.org/glsa/201904-06
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html
- https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10926
- https://security-tracker.debian.org/tracker/CVE-2018-10926
Affected packages
Debian:11 / glusterfs
Package
- Name
- glusterfs
- Purl
- pkg:deb/debian/glusterfs?arch=source
Debian:12 / glusterfs
Package
- Name
- glusterfs
- Purl
- pkg:deb/debian/glusterfs?arch=source
Debian:13 / glusterfs
Package
- Name
- glusterfs
- Purl
- pkg:deb/debian/glusterfs?arch=source