GlusterFS Device Creation Vulnerability Exploited by Authenticated Attackers

CVE-2018-10923

What is CVE-2018-10923?

An issue was identified in GlusterFS where the 'mknod' system call can be misused to create files that point to devices on a GlusterFS server node. This allows an authenticated attacker to potentially create arbitrary device files, leading to unauthorized access and the ability to read sensitive data from devices connected to the server. Such exploitation underscores the importance of applying security updates and vigilant monitoring of access controls within GlusterFS deployments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References