Red Hat Security Advisory: glusterfs security and bug fix update

Fixed packages 27

Vulnerabilities 7

• High 8.8
  CVE-2018-14651

  It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was in…

  [UNKNOWN] glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14652

  The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' tran…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14653

  The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14659

  The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14660

  A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY …

  [UNKNOWN] glusterfs glusterfs glusterfs Debian Ubuntu
  Nov 1, 2018
• Medium 6.5
  CVE-2018-14661

  It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red…

  The Gluster Project glusterfs-server glusterfs glusterfs Debian Ubuntu Azure Linux
  Oct 31, 2018
• Medium 5.4
  CVE-2018-14654

  The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attac…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631576
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632557
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632974
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633431
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635926
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635929
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636880
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1643194
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3431.json
• report
  https://access.redhat.com/security/cve/CVE-2018-14651
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14651
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14651
• report
  https://access.redhat.com/security/cve/CVE-2018-14652
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14652
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14652
• report
  https://access.redhat.com/security/cve/CVE-2018-14653
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14653
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14653
• report
  https://access.redhat.com/security/cve/CVE-2018-14654
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14654
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14654
• report
  https://access.redhat.com/security/cve/CVE-2018-14659
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14659
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14659
• report
  https://access.redhat.com/security/cve/CVE-2018-14660
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14660
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14660
• report
  https://access.redhat.com/security/cve/CVE-2018-14661
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-14661
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-14661