TI-2018-07723 CVE-2018-10911 · GHSA-x86v-j2gh-g3w6
Integer overflow in Red Hat glusterfs:
Priority LOW 38
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values.
RHSA-2018:3242
glusterfs security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) glusterfs-3.12.2-18.el7, glusterfs-api-3.12.2-18.el7, glusterfs-cli-3.12.2-18.el7 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glusterfs-api-devel-3.12.2-18.el7, glusterfs-devel-3.12.2-18.el7, glusterfs-rdma-3.12.2-18.el7 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) glusterfs-3.12.2-18.el7, glusterfs-api-3.12.2-18.el7, glusterfs-client-xlators-3.12.2-18.el7 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glusterfs-api-devel-3.12.2-18.el7, glusterfs-cli-3.12.2-18.el7, glusterfs-devel-3.12.2-18.el7 +1
- Red Hat Enterprise Linux Server (v. 7) glusterfs-3.12.2-18.el7, glusterfs-api-3.12.2-18.el7, glusterfs-cli-3.12.2-18.el7 +4
- Red Hat Enterprise Linux Server Optional (v. 7) glusterfs-api-3.12.2-18.el7, glusterfs-api-devel-3.12.2-18.el7, glusterfs-cli-3.12.2-18.el7 +4
- Red Hat Enterprise Linux Workstation (v. 7) glusterfs-3.12.2-18.el7, glusterfs-api-3.12.2-18.el7, glusterfs-cli-3.12.2-18.el7 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) glusterfs-api-devel-3.12.2-18.el7, glusterfs-devel-3.12.2-18.el7, python2-gluster-3.12.2-18.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) glusterfs-3.12.2-18.el7, glusterfs-libs-3.12.2-18.el7, glusterfs-rdma-3.12.2-18.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) glusterfs-api-3.12.2-18.el7, glusterfs-api-devel-3.12.2-18.el7, glusterfs-cli-3.12.2-18.el7 +4