vulnerability
Ubuntu: USN-4770-1 (CVE-2018-10841): GlusterFS vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Jun 20, 2018 | Mar 22, 2023 | Mar 27, 2026 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Jun 20, 2018
Added
Mar 22, 2023
Modified
Mar 27, 2026
Description
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.
Solutions
ubuntu-pro-upgrade-glusterfs-clientubuntu-pro-upgrade-glusterfs-commonubuntu-pro-upgrade-glusterfs-server
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.