CVE-2018-10913 PUBLISHED

An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the existence of any file.

EPSS 0.96% · 76.3th percentile

Risk Scores

EPSS Score
0.96%
76.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSglusterfs0, 3.7.6-1ubuntu1, 3.7.3-1ubuntu2
Ubuntu:Pro:18.04:LTSglusterfs3.13.2-1ubuntu1, 3.12.2-2, 3.12.3-1
Ubuntu:Pro:14.04:LTSglusterfs3.4.2-1ubuntu1, 3.4.1-2ubuntu1, 3.4.1-1ubuntu1

Timeline

References

Open in Interactive Console →