CVE-2018-10927
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-10927
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10927.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-10927
- Related
- Published
- 2018-09-04T15:29:00Z
- Modified
- 2024-09-18T02:37:14.966867Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in RPC request using gfs3lookupreq in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.
- References
-
- https://access.redhat.com/errata/RHSA-2018:2607
- https://access.redhat.com/errata/RHSA-2018:2608
- https://access.redhat.com/errata/RHSA-2018:3470
- https://security.gentoo.org/glsa/201904-06
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html
- https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10927
- https://security-tracker.debian.org/tracker/CVE-2018-10927
Affected packages
Debian:11 / glusterfs
Package
- Name
- glusterfs
- Purl
- pkg:deb/debian/glusterfs?arch=source
Debian:12 / glusterfs
Package
- Name
- glusterfs
- Purl
- pkg:deb/debian/glusterfs?arch=source
Debian:13 / glusterfs
Package
- Name
- glusterfs
- Purl
- pkg:deb/debian/glusterfs?arch=source