Lucene search
Veracode Vulnerability DatabaseVERACODE:12783HistoryJan 15, 2019 - 9:21 a.m.
Privilege Escalation
2019-01-1509:21:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
EPSS
0.008
Percentile
81.9%
libglusterfs.so is vulnerable to privilege escalation. A malicious user can use an unauthenticated gluster client to connect and mount arbitrary gluster storage volumes that can escalate privileges through a scheduled cronjob.
References
lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
access.redhat.com/articles/3414511
access.redhat.com/errata/RHSA-2018:1136
access.redhat.com/errata/RHSA-2018:1137
access.redhat.com/errata/RHSA-2018:1275
access.redhat.com/errata/RHSA-2018:1524
access.redhat.com/security/cve/CVE-2018-1088
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1558721
lists.debian.org/debian-lts-announce/2021/11/msg00000.html
security.gentoo.org/glsa/201904-06
Related
ubuntucve
ubuntucve
CVE-2018-1088
2018-04-18 00:00:00
CVE-2018-1112
2018-04-25 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: glusterfs-3.12.9-1.fc27
2018-05-01 13:42:13
[SECURITY] Fedora 26 Update: glusterfs-3.10.12-1.fc26
2018-05-12 18:27:23
[SECURITY] Fedora 28 Update: glusterfs-4.0.2-1.fc28
2018-04-29 20:55:28
prion
prion
Privilege escalation
2018-04-18 16:29:00
Design/Logic Flaw
2018-04-25 12:29:00
redhat
redhat
(RHSA-2018:1136) Important: glusterfs security update
2018-04-18 10:16:03
(RHSA-2018:1137) Important: glusterfs security update
2018-04-18 10:16:04
(RHSA-2018:1269) Important: glusterfs security update
2018-04-30 12:39:29
debiancve
debiancve
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
cvelist
cvelist
CVE-2018-1088
2018-04-18 16:00:00
CVE-2018-1112
2018-04-25 12:00:00
nessus
nessus
RHEL 6 : glusterfs (RHSA-2018:1137)
2018-04-19 00:00:00
Fedora 27 : glusterfs (2018-6dc9145693)
2018-05-02 00:00:00
RHEL 7 : glusterfs (RHSA-2018:1136) (deprecated)
2018-04-19 00:00:00
redhatcve
redhatcve
openvas
openvas
Fedora Update for glusterfs FEDORA-2018-f9e0f1caf7
2018-05-13 00:00:00
Fedora Update for glusterfs FEDORA-2018-6dc9145693
2018-05-02 00:00:00
Huawei EulerOS: Security Advisory for glusterfs (EulerOS-SA-2018-1185)
2020-01-23 00:00:00
veracode
veracode
Privilege Escalation
2018-05-02 05:32:24
osv
osv
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
glusterfs - security update
2021-11-01 00:00:00
nvd
nvd
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
cve
cve
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
suse
suse
Security update for glusterfs (moderate)
2020-01-20 00:00:00
debian
debian
[SECURITY] [DLA 2806-1] glusterfs security update
2021-11-01 23:25:14
gentoo
gentoo
GlusterFS: Multiple Vulnerabilities
2019-04-02 00:00:00
ubuntu
ubuntu
GlusterFS vulnerabilities
2021-03-15 00:00:00