PT-2018-3746 · Red Hat+3 · Gluster+3

Pedro Sampaio · Published 2018-04-18 · Updated 2023-02-13 · CVE-2018-1088

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions gluster versions 3.x

Description The issue is related to a privilege escalation flaw in the gluster snapshot scheduler, which can be exploited by scheduling a malicious cronjob via symlink. This flaw allows an attacker to escalate privileges if they are allowed to mount gluster volumes.

Recommendations For gluster version 3.x, consider restricting access to the snapshot scheduler to prevent malicious cronjob scheduling until a patch is available. As a temporary workaround, consider disabling the shared gluster storage volume mounting capability for gluster clients to minimize the risk of exploitation.

Exploit

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

ALT-PU-2018-1730

BDU:2021-04142

CVE-2018-1088

DLA-2806-1

OPENSUSE-SU-2020:0079-1

OPENSUSE-SU-2020_0079-1

OPENSUSE-SU-2024:10794-1

RHSA-2018:1136

RHSA-2018:1137

RHSA-2018:1275

RHSA-2018:1524

USN-4770-1

Affected Products

Alt Linux

Suse

Ubuntu

Gluster

References · 75

• 🔥 https://github.com/MauroEldritch/GEVAUDAN · Exploit
• https://ubuntu.com/security/CVE-2018-14654 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1524 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1558721 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0079-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10904 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14651 · Vendor Advisory
• https://security.gentoo.org/glsa/201904-06 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1088 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-4770-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1275 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10927 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10907 · Vendor Advisory