vulnerability

Red Hat: CVE-2018-10907: Important: Red Hat Gluster Storage security, bug fix, and enhancement update (Multiple Advisories)

Name: Red Hat: CVE-2018-10907: Important: Red Hat Gluster Storage security, bug fix, and enhancement update (Multiple Advisories)
Creator: Red Hat
Published: 2018-09-04T00:00:00.000Z
Keywords: CVE, Red Hat, 2018, 10907, Important, redhat-upgrade-glusterfs-server, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

Published

Sep 4, 2018

Added

Sep 5, 2018

Modified

Mar 3, 2021

Description

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.

Solution

redhat-upgrade-glusterfs-server

References

NVD-CVE-2018-10907
REDHAT-RHSA-2018:2607
REDHAT-RHSA-2018:2608
REDHAT-RHSA-2018:3470

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report