USN-6507-1: GlusterFS vulnerability
Published Nov 22, 2023
·Updated
It was discovered that GlusterFS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GlusterFS to crash, resulting in a denial of service.
Affected Software
18 affected componentsFixes available
All of the following
ubuntu/glusterfs-client<10.3-5ubuntu0.1
10.3-5ubuntu0.1
Ubuntu Ubuntu=23.10
All of the following
ubuntu/glusterfs-common<10.3-5ubuntu0.1
10.3-5ubuntu0.1
Ubuntu Ubuntu=23.10
All of the following
ubuntu/glusterfs-server<10.3-5ubuntu0.1
10.3-5ubuntu0.1
Ubuntu Ubuntu=23.10
All of the following
ubuntu/glusterfs-client<10.3-4ubuntu0.2
10.3-4ubuntu0.2
Ubuntu Ubuntu=23.04
All of the following
ubuntu/glusterfs-common<10.3-4ubuntu0.2
10.3-4ubuntu0.2
Ubuntu Ubuntu=23.04
All of the following
ubuntu/glusterfs-server<10.3-4ubuntu0.2
10.3-4ubuntu0.2
Ubuntu Ubuntu=23.04
All of the following
ubuntu/glusterfs-client<10.1-1ubuntu0.2
10.1-1ubuntu0.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/glusterfs-common<10.1-1ubuntu0.2
10.1-1ubuntu0.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/glusterfs-server<10.1-1ubuntu0.2
10.1-1ubuntu0.2
Ubuntu Ubuntu=22.04
Event History
Nov 22, 2023
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID for this GlusterFS vulnerability?
The vulnerability ID for this GlusterFS vulnerability is USN-6507-1.
2
What is the impact of the GlusterFS vulnerability?
The GlusterFS vulnerability could allow a remote attacker to cause GlusterFS to crash, resulting in a denial of service.
3
Which versions of GlusterFS are affected by this vulnerability?
Versions 10.3-5ubuntu0.1, 10.3-4ubuntu0.2, and 10.1-1ubuntu0.2 of GlusterFS are affected by this vulnerability.
4
How can I fix the GlusterFS vulnerability?
To fix the GlusterFS vulnerability, you should update the affected packages to the recommended versions.
5
Where can I find more information about the GlusterFS vulnerability?
You can find more information about the GlusterFS vulnerability on the Ubuntu security website and the launchpad.net links provided.