CVE-2018-10913: Infoleak
A flaw was found in GlusterFS. An Information Exposure vulnerability due to an improper implementation of the glusterfs.file function. An attacker could exploit this to obtain information about the files available.
Other sources
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-10913?
CVE-2018-10913 is an information disclosure vulnerability discovered in the glusterfs server.
How can an attacker exploit CVE-2018-10913?
An attacker can exploit CVE-2018-10913 by issuing a xattr request via glusterfs FUSE to determine the existence of any file.
Which versions of glusterfs are affected by CVE-2018-10913?
Versions 3.12.0 to 3.12.14 and 4.1.0 to 4.1.4 of glusterfs are affected.
What is the severity level of CVE-2018-10913?
CVE-2018-10913 has a severity level of medium with a CVSS score of 6.5.
Where can I find more information about CVE-2018-10913?
You can find more information about CVE-2018-10913 at the following references: [Reference 1](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1625074), [Reference 2](https://access.redhat.com/errata/RHSA-2018:2607), [Reference 3](https://access.redhat.com/errata/RHSA-2018:2608).