CVE-2018-14651
High
Description
It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Glusterfs
PublishedOct 31, 2018
First seenOct 31, 2018
Weakness typeCWE-59Improper link resolution
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gluster glusterfs | 3.12 ≤ v ≤ 3.12.14, 4.1 ≤ v ≤ 4.1.4 | — |
| debian debian_linux | 8.0 | — |
| redhat enterprise_linux | 6.0, 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.