CVE-2018-14651
Fixed in a distro release EPSS 3%CVSS 8.8
It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.
Products: debian_linux, redhat enterprise_linux, glusterfs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glusterfs | 5.1-1 |
| Debian 13 | glusterfs | 5.1-1 |
| Debian 14 | glusterfs | 5.1-1 |
| Debian 8 | glusterfs | 3.5.2-2+deb8u5 |
| Red Hat Enterprise Linux 7 | glusterfs | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-api | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-api-devel | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-cli | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-client-xlators | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-debuginfo | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-devel | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-fuse | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-libs | 0:3.12.2-25.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-rdma | 0:3.12.2-25.el7 |
| Red Hat storage 3.4 server el6 | glusterfs | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-api | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-api-devel | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-cli | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-client-xlators | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-debuginfo | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-devel | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-events | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-fuse | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-ganesha | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-geo-replication | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-libs | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-rdma | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | glusterfs-server | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | python2-gluster | 0:3.12.2-25.el6rhs |
| Red Hat storage 3.4 server el6 | redhat-storage-server | 0:3.4.1.0-1.el6rhs |
| Red Hat storage 3.4 server el7 | glusterfs | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-api | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-api-devel | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-cli | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-client-xlators | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-debuginfo | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-devel | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-events | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-fuse | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-ganesha | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-geo-replication | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-libs | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-rdma | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-resource-agents | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | glusterfs-server | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | python2-gluster | 0:3.12.2-25.el7rhgs |
| Red Hat storage 3.4 server el7 | redhat-storage-server | 0:3.4.1.0-1.el7rhgs |
| Red Hat storage 3 client el6 | glusterfs | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-api | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-api-devel | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-cli | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-client-xlators | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-debuginfo | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-devel | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-fuse | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-libs | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | glusterfs-rdma | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el6 | python2-gluster | 0:3.12.2-25.el6 |
| Red Hat storage 3 client el7 | glusterfs | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-api | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-api-devel | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-cli | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-client-xlators | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-debuginfo | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-devel | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-fuse | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-libs | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | glusterfs-rdma | 0:3.12.2-25.el7 |
| Red Hat storage 3 client el7 | python2-gluster | 0:3.12.2-25.el7 |
| Ubuntu Pro 14.04 LTS | glusterfs | 3.4.2-1ubuntu1+esm1 |
| Ubuntu Pro 16.04 LTS | glusterfs | 3.7.6-1ubuntu1+esm1 |
| Ubuntu Pro 18.04 LTS | glusterfs | 3.13.2-1ubuntu1+esm1 |