CVE-2018-10907: Buffer Overflow
GlusterFS is vulnerable to multiple stack-based buffer overflows due to functions in server-rpc-fops.c allocating fixed-size buffers using 'alloca(3)'. A remote attacker could expliot this by mounting a Gluster volume and sending a string longer than the fixed buffer to cause a crash or potential code execution.
Other sources
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-10907?
CVE-2018-10907 is a vulnerability found in the glusterfs server that allows an authenticated attacker to exploit stack-based buffer overflows.
How can an attacker exploit CVE-2018-10907?
An attacker can exploit CVE-2018-10907 by mounting a gluster volume and sending a string longer than the fixed buffer size.
What is the severity of CVE-2018-10907?
The severity of CVE-2018-10907 is rated as high with a CVSS score of 8.8.
Which versions of glusterfs are affected by CVE-2018-10907?
The versions affected by CVE-2018-10907 are 3.12.0 up to but excluding 3.12.14, and 4.1.0 up to but excluding 4.1.4.
How can I fix CVE-2018-10907?
To fix CVE-2018-10907, update glusterfs to version 3.12.14 or 4.1.4 depending on the affected version.