Description
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat glusterfs
n/aaffected
References
- https://access.redhat.com/errata/RHSA-2018:2607 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10927 ↗
- https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html ↗
- https://access.redhat.com/errata/RHSA-2018:2608 ↗
- https://access.redhat.com/errata/RHSA-2018:3470 ↗
- https://security.gentoo.org/glsa/201904-06 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html ↗
- https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html ↗