Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-10923
8.1
HIGHCVSS v3
Published
September 4, 2018
CVSS v2
5.5 MEDIUM
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.
gluster/glusterfs
GitHubGluster Filesystem : Build your distributed storage in minutes
GitHubGluster Filesystem : Build your distributed storage in minutes>= 3.12.0, < 3.12.14, >= 4.1.0, < 4.1.8NVD
Docker Hub