Lucene search
RedhatCVELIST:CVE-2018-1088HistoryApr 18, 2018 - 4:00 p.m.
CVE-2018-1088
2018-04-1816:00:00
CWE-266
redhat
www.cve.org
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.
CNA Affected
[
{
"product": "glusterfs",
"vendor": "Red Hat, Inc.",
"versions": [
{
"status": "affected",
"version": "3.x"
}
]
}
]References
lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
access.redhat.com/errata/RHSA-2018:1136
access.redhat.com/errata/RHSA-2018:1137
access.redhat.com/errata/RHSA-2018:1275
access.redhat.com/errata/RHSA-2018:1524
bugzilla.redhat.com/show_bug.cgi?id=1558721
lists.debian.org/debian-lts-announce/2021/11/msg00000.html
security.gentoo.org/glsa/201904-06
Related
nessus
nessus
RHEL 7 : glusterfs (RHSA-2018:1136) (deprecated)
2018-04-19 00:00:00
Fedora 27 : glusterfs (2018-6dc9145693)
2018-05-02 00:00:00
Fedora 28 : glusterfs (2018-e048a4ef13)
2019-01-03 00:00:00
openvas
openvas
Fedora Update for glusterfs FEDORA-2018-f9e0f1caf7
2018-05-13 00:00:00
Fedora Update for glusterfs FEDORA-2018-6dc9145693
2018-05-02 00:00:00
Huawei EulerOS: Security Advisory for glusterfs (EulerOS-SA-2018-1185)
2020-01-23 00:00:00
veracode
veracode
Privilege Escalation
2018-05-02 05:32:24
Privilege Escalation
2019-01-15 09:21:42
redhatcve
redhatcve
fedora
fedora
[SECURITY] Fedora 26 Update: glusterfs-3.10.12-1.fc26
2018-05-12 18:27:23
[SECURITY] Fedora 28 Update: glusterfs-4.0.2-1.fc28
2018-04-29 20:55:28
[SECURITY] Fedora 27 Update: glusterfs-3.12.9-1.fc27
2018-05-01 13:42:13
osv
osv
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
glusterfs - security update
2021-11-01 00:00:00
cve
cve
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
nvd
nvd
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
prion
prion
Privilege escalation
2018-04-18 16:29:00
Design/Logic Flaw
2018-04-25 12:29:00
redhat
redhat
(RHSA-2018:1137) Important: glusterfs security update
2018-04-18 10:16:04
(RHSA-2018:1136) Important: glusterfs security update
2018-04-18 10:16:03
(RHSA-2018:1269) Important: glusterfs security update
2018-04-30 12:39:29
debiancve
debiancve
CVE-2018-1088
2018-04-18 16:29:00
CVE-2018-1112
2018-04-25 12:29:00
ubuntucve
ubuntucve
CVE-2018-1088
2018-04-18 00:00:00
CVE-2018-1112
2018-04-25 00:00:00
cvelist
cvelist
CVE-2018-1112
2018-04-25 12:00:00
suse
suse
Security update for glusterfs (moderate)
2020-01-20 00:00:00
gentoo
gentoo
GlusterFS: Multiple Vulnerabilities
2019-04-02 00:00:00
debian
debian
[SECURITY] [DLA 2806-1] glusterfs security update
2021-11-01 23:25:30
ubuntu
ubuntu
GlusterFS vulnerabilities
2021-03-15 00:00:00