CVE-2018-10928

Name of the Vulnerable Software and Affected Versions glusterfs server (affected versions not specified)

Description A flaw was found in the RPC request using gfs3 symlink req in the glusterfs server, allowing symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.