{"id":"CVE-2018-10841","aliases":["CLSA-2026-1777566732","DEBIAN-CVE-2018-10841","DLA-2806-1","EUVD-2018-2910","GHSA-383h-f6wm-hpxc","RHSA-2018:1954","RHSA-2018:1955","UBUNTU-CVE-2018-10841","USN-4770-1"],"status":"published","title":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster...","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","severity":{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0123,"percentile":0.6914,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-288"],"published":"2018-06-20T18:00:00Z","modified":"2026-10-24T10:30:17Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-client","fixed_in":["3.7.6-1ubuntu1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-common","fixed_in":["3.7.6-1ubuntu1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-server","fixed_in":["3.7.6-1ubuntu1+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glusterfs","fixed_in":["4.1.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glusterfs","fixed_in":["4.1.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glusterfs","fixed_in":["4.1.2-1"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-api","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-api-devel","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-cli","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-client-xlators","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-debuginfo","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-devel","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-events","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-fuse","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-ganesha","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-geo-replication","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-libs","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-rdma","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-resource-agents","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-server","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el7","package":"python-gluster","fixed_in":["0:3.8.4-54.10.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api-devel","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-cli","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-client-xlators","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-debuginfo","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-devel","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-fuse","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-libs","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-rdma","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-gluster","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api-devel","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-cli","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-client-xlators","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-debuginfo","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-devel","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-fuse","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-libs","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-rdma","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el7","package":"python-gluster","fixed_in":["0:3.8.4-54.10.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-api","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-api-devel","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-cli","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-client-xlators","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-debuginfo","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-devel","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-events","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-fuse","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-ganesha","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-geo-replication","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-libs","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-rdma","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-server","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3.3:server:el6","package":"python-gluster","fixed_in":["0:3.8.4-54.11.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-cli","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-client-xlators","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"python-gluster","fixed_in":["0:3.8.4-54.11.el6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","fixed_in":["3.7.6-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","fixed_in":["3.13.2-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.8-1+deb9u1"}]}],"versions":["3.8.8-1"],"bundled":19},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-events","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el7","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.10.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-events","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3.3:server:el6","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"python-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.4-54.11.el6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"],"bundled":22}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gluster","product":"glusterfs"},{"vendor":"red hat","product":"glusterfs"},{"vendor":"unspecified","product":"glusterfs"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10841","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1955","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://review.gluster.org/#/c/20328/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1954","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201904-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10841","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582043","tags":["report"]},{"url":"https://github.com/advisories/GHSA-383h-f6wm-hpxc"},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1777566732.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10841","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1954.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10841","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1955.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10841","tags":["report"]},{"url":"http://git.gluster.org/cgit/glusterfs.git/commit/?id=e8d928e34680079e42be6947ffacc4ddd7defca2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4770-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14661","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-10841","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2018-06-20T18:00:00Z","modified":"2024-08-05T07:46:47.063Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2018-2910","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2018-06-20T18:00:00Z","modified":"2024-08-05T07:46:47Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:57.544825Z"}],"ghsa":[{"id":"GHSA-383h-f6wm-hpxc","title":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster...","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2022-05-13T01:04:37Z","modified":"2023-02-10T05:06:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2018-10841","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2018-06-20T18:29:00.233Z","modified":"2026-06-17T01:34:44.617Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:04:29.837913Z"}],"osv":[{"id":"CVE-2018-10841","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2018-06-20T18:29:00.233Z","modified":"2026-10-24T10:30:17.573943552Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10841","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2018-06-20T18:29:00.233Z","modified":"2026-10-23T18:03:18.149723524Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:1954","title":"Red Hat Security Advisory: glusterfs security update","status":"published","published":"2024-09-13T16:51:38Z","modified":"2026-07-01T10:03:59Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1955","title":"Red Hat Security Advisory: glusterfs security update","status":"published","published":"2024-09-13T16:51:33Z","modified":"2026-07-01T10:03:59Z","cvss":[{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-10841","description":"glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool, start, stop, and delete volumes.","status":"published","published":"2018-06-20T18:29:00Z","modified":"2026-02-04T04:26:33.66986Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":6.6,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"CLSA-2026-1777566732","title":"Fix CVE(s): CVE-2018-10841","description":"   * SECURITY UPDATE: privilege escalation on glusterd nodes via the CLI\n     RPC program being exposed on the TCP listener when management-plane\n     SSL is enabled, allowing a TLS-authenticated client outside the\n     trusted storage pool to issue privileged volume-management commands\n     via gluster --remote-host\n     - debian/patches/CVE-2018-10841.patch: drop gd_inet_programs[1] =\n       \u0026gd_svc_cli_prog rebinding in glusterd init() so the trusted-pool\n       CLI program remains bound to the TCP listener and the full CLI\n       RPC program continues to be served only over the local UNIX\n       domain socket\n     - CVE-2018-10841","status":"published","published":"2026-04-30T16:32:33Z","modified":"2026-06-04T10:04:25.414601Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-2806-1","title":"glusterfs - security update","status":"published","published":"2021-11-01T00:00:00Z","modified":"2026-03-09T01:23:07.332286Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"USN-4770-1","title":"glusterfs vulnerabilities","description":"It was discovered that GlusterFS incorrectly handled network requests. An\nattacker could possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 14.04 ESM. (CVE-2014-3619)\n\nIt was discovered that GlusterFS incorrectly handled user permissions. An\nauthenticated attacker could possibly use this to add himself to a trusted\nstorage pool and perform privileged operations on volumes. This issue only\naffected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-10841)\n\nIt was discovered that GlusterFS incorrectly handled mounting gluster\nvolumes. An attacker could possibly use this issue to also mount shared\ngluster volumes and escalate privileges through malicious cronjobs. This\nissue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-1088)\n\nIt was discovered that GlusterFS incorrectly handled file paths. An\nattacker could possibly use this issue to create arbitrary files and\nexecute arbitrary code. (CVE-2018-10904)\n\nIt was discovered that GlusterFS incorrectly handled mounting volumes. An\nattacker could possibly use this issue to cause a denial of service or run\narbitrary code. (CVE-2018-10907)\n\nIt was discovered that GlusterFS incorrectly handled negative key length\nvalues. An attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2018-10911)\n\nIt was discovered that GlusterFS incorrectly handled FUSE requests. An\nattacker could use this issue to obtain sensitive information.\n(CVE-2018-10913, CVE-2018-10914)\n\nIt was discovered that GlusterFS incorrectly handled the file creation\nprocess. An authenticated attacker could possibly use this issue to create\narbitrary files and obtain sensitive information. (CVE-2018-10923)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. An\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-10924)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. An\nattacker could possibly use this issue to write files to an arbitrary\nlocation and execute arbitrary code. (CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930)\n\nIt was discovered that the fix for CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930 was incomplete. A remote\nauthenticated attacker could possibly use this issue to execute arbitrary\ncode or cause a denial of service. (CVE-2018-14651)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to cause a\ndenial of service. (CVE-2018-14652)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice or other unspecified impact. (CVE-2018-14653)\n\nIt was discovered that GlusterFS incorrectly handled mount volumes\noperation. A remote attacker could possibly use this issue to create\narbitrary files. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14654)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to create\narbitrary files. (CVE-2018-14659)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. A\nremote authenticated attacker could possibly use this is issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14660)\n\nIt was discovered that GlusterFS incorrectly handled strings. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. (CVE-2018-14661)\n","status":"published","published":"2021-03-15T20:13:19Z","modified":"2026-06-29T13:48:13.075405496Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}