USN-5989-1 — glusterfs vulnerability

Summary

Tao Lyu discovered that GlusterFS did not properly handle certain
event notifications. An attacker could possibly use this issue to
cause a denial of service.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	glusterfs	3.7.6-1ubuntu1+esm2

Vulnerabilities 1

High 7.5

CVE-2023-26253

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

glusterfs glusterfs glusterfs Debian Ubuntu Azure Linux

Feb 21, 2023

References

report
https://ubuntu.com/security/CVE-2023-26253

glusterfs vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

References