Red Hat Security Advisory: Red Hat Virtualization security and bug fix update

Fixed packages 6

Vulnerabilities 20

• High 8.8
  CVE-2018-1000805

  Paramiko Authentication Bypass vulnerability

  Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

  paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI
  Oct 8, 2018
• High 8.8
  CVE-2018-10904

  It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attrib…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• High 8.8
  CVE-2018-10907

  It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rp…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• High 8.8
  CVE-2018-10928

  A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point t…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• High 8.8
  CVE-2018-10929

  A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this fla…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• High 8.3
  CVE-2018-10873

  A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages …

  [UNKNOWN] spice: spice spice Debian Ubuntu Alpine
  Aug 17, 2018
• High 8.1
  CVE-2018-10926

  A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• High 7.6
  CVE-2018-10923

  It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server nod…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• High 7.1
  CVE-2018-10927

  A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this fla…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• Medium 6.5
  CVE-2018-10911

  A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attack…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• Medium 6.5
  CVE-2018-10930

  A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this fla…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• Medium 6.5
  CVE-2018-14652

  The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' tran…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14653

  The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14659

  The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 6.5
  CVE-2018-14660

  A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY …

  [UNKNOWN] glusterfs glusterfs glusterfs Debian Ubuntu
  Nov 1, 2018
• Medium 6.5
  CVE-2018-14661

  It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red…

  The Gluster Project glusterfs-server glusterfs glusterfs Debian Ubuntu Azure Linux
  Oct 31, 2018
• Medium 5.5
  CVE-2018-10914

  It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash wh…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018
• Medium 5.4
  CVE-2018-14654

  The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attac…

  The Gluster Project glusterfs glusterfs glusterfs Debian Ubuntu
  Oct 31, 2018
• Medium 4.3
  CVE-2018-10858

  A heap-buffer overflow was found in the way samba clients processed extra long filename in a directory listing. A malic…

  The Samba Team samba samba samba Debian Ubuntu Alpine
  Aug 22, 2018
• Low 3.5
  CVE-2018-10913

  An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via…

  Red Hat GlusterFS glusterfs glusterfs Debian Ubuntu
  Sep 4, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1501276
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1593731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1596008
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601298
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601642
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601657
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1607617
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1607618
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1610659
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612658
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612659
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612660
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612664
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612805
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1613143
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1613231
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1614971
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1619590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1624453
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1626960
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1631576
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632585
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1632974
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1633431
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635926
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1635929
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1636880
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3470.json
• report
  https://access.redhat.com/security/cve/CVE-2018-10858
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10858
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10858
• article
  https://www.samba.org/samba/security/CVE-2018-10858.html
• report
  https://access.redhat.com/security/cve/CVE-2018-10873
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10873
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10873
• report
  https://access.redhat.com/security/cve/CVE-2018-10904
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10904
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10904