CVE-2018-10929

Source
https://cve.org/CVERecord?id=CVE-2018-10929
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-10929.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-10929
Downstream
Related
Published
2018-09-04T16:29:00.223Z
Modified
2026-02-03T06:59:19.426359Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in RPC request using gfs2createreq in glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute arbitrary code on glusterfs server nodes.

References

Affected packages

Git / github.com/gluster/glusterfs

Affected versions

v3.*
v3.12.0
v3.12.0alpha1
v3.12.0rc0
v3.12.1
v3.12.10
v3.12.11
v3.12.12
v3.12.13
v3.12.2
v3.12.3
v3.12.4
v3.12.5
v3.12.6
v3.12.7
v3.12.8
v3.12.9
v3.12dev
v4.*
v4.0dev
v4.1.0
v4.1.0alpha
v4.1.0rc0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.5
v4.1.6
v4.1.7
v4.1dev
v4.2dev

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-10929.json"