Summary
It was discovered that GlusterFS incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause
GlusterFS to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | glusterfs | 10.1-1ubuntu0.2 |
Vulnerabilities 1
-
High 7.5
In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.
References
-
report
https://ubuntu.com/security/CVE-2022-48340