CVE-2018-10928: High severity debian linux vulnerability

Q: What is the vulnerability ID of this flaw?

The vulnerability ID of this flaw is CVE-2018-10928.

Q: What is the severity rating of CVE-2018-10928?

CVE-2018-10928 has a severity rating of 8.8 (high).

Q: What is affected by CVE-2018-10928?

CVE-2018-10928 affects the glusterfs server.

Q: How can an attacker exploit CVE-2018-10928?

An attacker can exploit CVE-2018-10928 by using a symlink destination to point to file paths outside of the gluster volume.

Q: Are there any remedies available for CVE-2018-10928?

Yes, there are remedies available for CVE-2018-10928. Please refer to the provided references for more information.

Published Aug 6, 2018

Updated

A flaw was found in RPC request using gfs3symlinkreq in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.

Other sources

The Gluster filesystem allows for symlink destinations to point to filepaths outside of the mounted volume. An attacker could exploit this via a crafted request to create arbitrary files and subsequently execute arbitrary privileged commands.

— Red Hat

Affected Software

22 affected componentsFixes available

redhat/glusterfs<0:3.12.2-18.el6

0:3.12.2-18.el6

redhat/glusterfs<0:3.12.2-18.el7

0:3.12.2-18.el7

redhat/redhat-release-server<0:6Server-6.10.0.24.el6

0:6Server-6.10.0.24.el6

redhat/redhat-storage-server<0:3.4.0.0-1.el6

0:3.4.0.0-1.el6

redhat/redhat-release-server<0:7.5-11.el7

0:7.5-11.el7

redhat/redhat-storage-server<0:3.4.0.0-1.el7

0:3.4.0.0-1.el7

redhat/imgbased<0:1.0.29-1.el7e

0:1.0.29-1.el7e

redhat/redhat-release-virtualization-host<0:4.2-7.3.el7

0:4.2-7.3.el7

redhat/redhat-virtualization-host<0:4.2-20181026.0.el7_6

0:4.2-20181026.0.el7_6

redhat/glusterfs<3.12.14

3.12.14

redhat/glusterfs<4.1.4

4.1.4

Debian Debian Linux=8.0

Debian Debian Linux=9.0

redhat Enterprise Linux=6.0

redhat Enterprise Linux=7.0

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Server=7.0

gluster GlusterFS>=3.12<3.12.14

gluster GlusterFS>=4.1<4.1.8

redhat Gluster Storage=3.0

redhat Virtualization Host=4.0

openSUSE Leap=15.1

Remediation

Patch Available

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10928

Information

To limit exposure of gluster server nodes : 1. gluster server should be on LAN and not reachable from public networks. 2. Use gluster auth.allow and auth.reject. 3. Use TLS certificates to authenticate gluster clients. caveat: This does not protect from attacks by authenticated gluster clients.

Event History

Sep 4, 2018

CVE Published

05:30 AM

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the vulnerability ID of this flaw?