glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3123:02 advisory.

    * It was found that fix for CVE-2018-1088 introduced a new vulnerability in the way 'auth.allow' is     implemented in glusterfs server. An unauthenticated gluster client could mount gluster storage volumes.
    (CVE-2018-1112)     CVE-2018-1112     glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows     any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE:
    this vulnerability exists because of a CVE-2018-1088 regression.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3121:04 advisory.

    * It was found that fix for CVE-2018-1088 introduced a new vulnerability in the way 'auth.allow' is     implemented in glusterfs server. An unauthenticated gluster client could mount gluster storage volumes.
    (CVE-2018-1112)     CVE-2018-1112     glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows     any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE:
    this vulnerability exists because of a CVE-2018-1088 regression.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for glusterfs fixes the following issues :

glusterfs was update to release 3.12.15 :

  - Fixed a number of bugs and security issues :

  - CVE-2018-1088, CVE-2018-1112 [boo#1090084],     CVE-2018-10904 [boo#1107018], CVE-2018-10907     [boo#1107019], CVE-2018-10911 [boo#1107020],     CVE-2018-10913 [boo#1107021], CVE-2018-10914     [boo#1107022], CVE-2018-10923 [boo#1107023],     CVE-2018-10924 [boo#1107024], CVE-2018-10926     [boo#1107025], CVE-2018-10927 [boo#1107026],     CVE-2018-10928 [boo#1107027], CVE-2018-10928     [boo#1107027], CVE-2018-10929 [boo#1107028],     CVE-2018-10930 [boo#1107029], boo#1105776 .

According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A privilege escalation flaw was found in gluster     snapshot scheduler. Any gluster client allowed to mount     gluster volumes could also mount shared gluster storage     volume and escalate privileges by scheduling malicious     cronjob via symlink.(CVE-2018-1088)

  - It was found that fix for CVE-2018-1088 introduced a     new vulnerability in the way 'auth.allow' is     implemented in glusterfs server. An unauthenticated     gluster client could mount gluster storage     volumes.(CVE-2018-1112)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1269 advisory.

    GlusterFS is a key building block of Red Hat Gluster Storage. It is based on a stackable user-space design     and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage     servers over network interconnections into one large, parallel network file system.

    Security Fix(es):

    * It was found that fix for CVE-2018-1088 introduced a new vulnerability in the way 'auth.allow' is     implemented in glusterfs server. An unauthenticated gluster client could mount gluster storage volumes.
    (CVE-2018-1112)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1268 advisory.

    GlusterFS is a key building block of Red Hat Gluster Storage. It is based on a stackable user-space design     and can deliver exceptional performance for diverse workloads. GlusterFS aggregates various storage     servers over network interconnections into one large, parallel network file system.

    Security Fix(es):

    * It was found that fix for CVE-2018-1088 introduced a new vulnerability in the way 'auth.allow' is     implemented in glusterfs server. An unauthenticated gluster client could mount gluster storage volumes.
    (CVE-2018-1112)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
289450	MiracleLinux 4 : glusterfs-3.8.4-54.9.AXS4 (AXSA:2018-3123:02)	Nessus	Miracle Linux Local Security Checks	high
289040	MiracleLinux 7 : glusterfs-3.8.4-54.8.el7 (AXSA:2018-3121:04)	Nessus	Miracle Linux Local Security Checks	high
133132	openSUSE Security Update : glusterfs (openSUSE-2020-79)	Nessus	SuSE Local Security Checks	high
110849	EulerOS 2.0 SP3 : glusterfs (EulerOS-SA-2018-1185)	Nessus	Huawei Local Security Checks	high
109443	RHEL 7 : glusterfs (RHSA-2018:1269)	Nessus	Red Hat Local Security Checks	high
109442	RHEL 6 : glusterfs (RHSA-2018:1268)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2018-1112

high

Tenable Plugins

high

high

high

high

high

high