DEBIAN-CVE-2018-10923

DEBIAN-CVE-2018-10923 PUBLISHED CVSS 8.100000381469727 HIGH

It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use this to create an arbitrary device and read data from any device attached to the glusterfs server node.

Risk Scores

CVSS v3.1

8.100000381469727

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:12	glusterfs	0, 0, 0
Debian:13	glusterfs	0, 0, 0
Debian:14	glusterfs	0, 0, 0
Debian:11	glusterfs	0, 0, 0

Timeline

Sep 4, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-10923 advisory

Open in Interactive Console →