Linux · 
Ubuntu · Package update · November 1, 2018
Ubuntu · Package update · November 1, 2018glusterfs-server 3.13.2-1ubuntu1+esm1: glusterfs-server 3.13.2-1ubuntu1+esm1 for Ubuntu 18.04.6 LTS (bionic)
glusterfs-server 3.13.2-1ubuntu1+esm1, released November 1, 2018, fixes 21 CVEs in glusterfs-server. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.
RoutineUnsupported product
CVEs closed
21
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0549
92nd percentile
Priority of the 21 CVEs
Patch now 0
Urgent 0
High 0
Routine 21
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| glusterfs-server | Ubuntu 18.04.6 LTS (bionic) | 3.13.2-1ubuntu1+esm1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Routine | CVE-2018-1088 | glusterfs-client: A privilege escalation flaw was found in gluster 3.x snapshot scheduler | n/a | 0.0549 | None reported |
| Routine | CVE-2018-10907 | glusterfs-client: It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-... | n/a | 0.0334 | None reported |
| Routine | CVE-2018-10929 | glusterfs-client: A flaw was found in RPC request using gfs2_create_req in glusterfs server | n/a | 0.0334 | None reported |
| Routine | CVE-2018-14651 | glusterfs-client: It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was... | n/a | 0.0323 | None reported |
| Routine | CVE-2018-10904 | glusterfs-client: It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attr... | n/a | 0.0300 | None reported |
| Routine | CVE-2018-10911 | glusterfs-client: A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values | n/a | 0.0287 | None reported |
| Routine | CVE-2018-14653 | glusterfs-client: The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__serve... | n/a | 0.0277 | None reported |
| Routine | CVE-2018-14652 | glusterfs-client: The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' tr... | n/a | 0.0275 | None reported |
| Routine | CVE-2018-10928 | glusterfs-client: A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point... | n/a | 0.0268 | None reported |
| Routine | CVE-2018-14661 | glusterfs-client: It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with R... | n/a | 0.0266 | None reported |
| Routine | CVE-2018-14654 | glusterfs-common: The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator | n/a | 0.0263 | None reported |
| Routine | CVE-2018-10927 | glusterfs-client: A flaw was found in RPC request using gfs3_lookup_req in glusterfs server | n/a | 0.0259 | None reported |
| Routine | CVE-2018-10926 | glusterfs-client: A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server | n/a | 0.0258 | None reported |
| Routine | CVE-2018-14660 | glusterfs-client: A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KE... | n/a | 0.0252 | None reported |
| Routine | CVE-2018-10914 | glusterfs-client: It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash... | n/a | 0.0229 | None reported |
| Routine | CVE-2018-14659 | glusterfs-client: The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the '... | n/a | 0.0217 | None reported |
| Routine | CVE-2018-10930 | glusterfs-client: A flaw was found in RPC request using gfs3_rename_req in glusterfs server | n/a | 0.0197 | None reported |
| Routine | CVE-2018-10913 | glusterfs-client: An information disclosure vulnerability was discovered in glusterfs server | n/a | 0.0196 | None reported |
| Routine | CVE-2018-10924 | glusterfs-client: It was discovered that fsync(2) system call in glusterfs client code leaks memory | n/a | 0.0190 | None reported |
| Routine | CVE-2018-10923 | glusterfs-client: It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node | n/a | 0.0156 | None reported |
| Routine | CVE-2018-10841 | glusterfs-client: glusterfs is vulnerable to privilege escalation on gluster server nodes | n/a | 0.0123 | None reported |
Showing 1 to 21 of 21
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.