vulnerability

Huawei EulerOS: CVE-2018-1112: glusterfs security update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Apr 25, 2018
Added
Jul 3, 2018
Modified
Aug 13, 2025

Description

glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

Solutions

huawei-euleros-2_0_sp3-upgrade-glusterfshuawei-euleros-2_0_sp3-upgrade-glusterfs-apihuawei-euleros-2_0_sp3-upgrade-glusterfs-client-xlatorshuawei-euleros-2_0_sp3-upgrade-glusterfs-fusehuawei-euleros-2_0_sp3-upgrade-glusterfs-libshuawei-euleros-2_0_sp3-upgrade-glusterfs-rdma
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.