MiracleLinux 7 : glusterfs-3.12.2-18.el7 (AXSA:2019-3587:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3587:01 advisory. glusterfs: Improper deserialization in dict.c:dictunserialize can allow attackers to read arbitrary memory CVE-2018-10911 Tenable has extracted the preceding...

glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory

A flaw was found in dict.c:dictunserialize function of glusterfs, dicunserialize function does not handle negative key length values. An attacker could use this flaw to read memory from other locations into the stored dict value...

glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory

A flaw was found in dict.c:dictunserialize function of glusterfs, dicunserialize function does not handle negative key length values. An attacker could use this flaw to read memory from other locations into the stored dict value...

PT-2018-2215

Name of the Vulnerable Software and Affected Versions GlusterFS affected versions not specified Description The issue is related to the dic unserialize function in the GlusterFS file system, which incorrectly handles negative key length values. This can be exploited by a remote attacker to access...