Unrated severityOSV Advisory· Published Oct 31, 2018· Updated Aug 5, 2024

CVE-2018-14651

Description

It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gluster/GlusterfsOSV2 versions
v3.12.0, v3.12.0alpha1, v3.12.0rc0, …+ 1 more
- (no CPE)range: v3.12.0, v3.12.0alpha1, v3.12.0rc0, …
- (no CPE)

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2018:3431mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2018:3432mitrevendor-advisoryx_refsource_REDHAT
security.gentoo.org/glsa/201904-06mitrevendor-advisoryx_refsource_GENTOO
bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
lists.debian.org/debian-lts-announce/2018/11/msg00003.htmlmitremailing-listx_refsource_MLIST

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000