CVE-2018-10841

2018-06-2000:00:00

ubuntu.com

0.002 Low

EPSS

Percentile

54.7%

JSON

glusterfs is vulnerable to privilege escalation on gluster server nodes. An
authenticated gluster client via TLS could use gluster cli with
–remote-host command to add it self to trusted storage pool and perform
privileged gluster operations like adding other machines to trusted storage
pool, start, stop, and delete volumes.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901968>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchglusterfs< 3.13.2-1ubuntu1+esm1UNKNOWN
ubuntu18.10noarchglusterfs< 4.1.2-1UNKNOWN
ubuntu16.04noarchglusterfs< 3.7.6-1ubuntu1+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	glusterfs	< 3.13.2-1ubuntu1+esm1	UNKNOWN
ubuntu	18.10	noarch	glusterfs	< 4.1.2-1	UNKNOWN
ubuntu	16.04	noarch	glusterfs	< 3.7.6-1ubuntu1+esm1	UNKNOWN