PT-2018-10180 · Red Hat+3 · Glusterfs+3

Publicado 2018-09-04 · Atualizado 2022-04-22 · CVE-2018-10914

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions glusterfs (affected versions not specified)

Description The issue allows an attacker to cause a remote denial of service by issuing a xattr request via glusterfs FUSE, leading to a crash of the gluster brick process. If gluster multiplexing is enabled, this can result in the crash of multiple bricks and gluster volumes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CESA-2018_2607

CVE-2018-10914

DLA-1510-1

DLA-2806-1

OPENSUSE-SU-2020:0079-1

OPENSUSE-SU-2020_0079-1

OPENSUSE-SU-2024:10794-1

RHSA-2018:2607

RHSA-2018:2608

RHSA-2018:3470

USN-4770-1

Produtos afetados

Centos

Suse

Ubuntu

Glusterfs

Referências · 121

• https://github.com/MauroEldritch/GEVAUDAN · Nota
• https://suse.com/security/cve/CVE-2018-1112 · Nota
• https://ubuntu.com/security/CVE-2018-10924 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-10930 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10928 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-10927 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10911 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2018-10914 · Nota de Segurança
• https://bugzilla.suse.com/1107027 · Nota
• https://osv.dev/vulnerability/DLA-1510-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10923 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1088 · Nota de Segurança
• https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html · Nota
• https://ubuntu.com/security/CVE-2018-10913 · Aviso do Fabricante