CVE-2018-10904

Name of the Vulnerable Software and Affected Versions glusterfs (affected versions not specified)

Description A flaw was discovered in the glusterfs server where it fails to properly sanitize file paths in the trusted.io-stats-dump extended attribute used by the debug/io-stats translator. This allows an attacker to create files and execute arbitrary code if they have sufficient access to modify the extended attributes of files on a gluster volume.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.