Use-after-free in GlusterFS - CVE-2022-48340

Vulnerability identifier: #VU74338

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-48340

CWE-ID: CWE-416

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the dht_setxattr_mds_cbk() function in xlators/cluster/dht/src/dht-common.c. A remote attacker can trick the victim to connect to a malicious server, trigger a use-after-free error and crash the client.

GlusterFS
openEuler
Ubuntu
Fedora
glusterfs-resource-agents
glusterfs-help
glusterfs-debuginfo
python3-gluster
glusterfs
glusterfs-debugsource
glusterfs-devel
glusterfs-thin-arbiter
libglusterd0
libgfchangelog0
libgfrpc-devel
glusterfs-cli
glusterfs-cloudsync-plugins
glusterfs-client-xlators
glusterfs-events
libgfapi0
glusterfs-fuse
libgfchangelog-devel
glusterfs-extra-xlators
glusterfs-server
libglusterfs-devel
libgfxdr-devel
libgfrpc0
libgfxdr0
glusterfs-geo-replication
libglusterfs0
libgfapi-devel
glusterfs-server (Ubuntu package)
glusterfs-common (Ubuntu package)
glusterfs-client (Ubuntu package)

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

glusterfs-resource-agents - addressed in versions 7.0-12, 10.0-9
glusterfs-help - addressed in versions 7.0-12, 10.0-9
glusterfs-debuginfo - addressed in versions 7.0-12, 10.0-9
python3-gluster - addressed in versions 7.0-12, 10.0-9
glusterfs - addressed in versions 7.0-12, 10.0-9
glusterfs-debugsource - addressed in versions 7.0-12, 10.0-9
glusterfs-devel - update to 7.0-12
glusterfs-thin-arbiter - update to 10.0-9
libglusterd0 - update to 10.0-9
libgfchangelog0 - update to 10.0-9
libgfrpc-devel - update to 10.0-9
glusterfs-cli - update to 10.0-9
glusterfs-cloudsync-plugins - update to 10.0-9
glusterfs-client-xlators - update to 10.0-9
glusterfs-events - update to 10.0-9
libgfapi0 - update to 10.0-9
glusterfs-fuse - update to 10.0-9
libgfchangelog-devel - update to 10.0-9
glusterfs-extra-xlators - update to 10.0-9
glusterfs-server - update to 10.0-9
libglusterfs-devel - update to 10.0-9
libgfxdr-devel - update to 10.0-9
libgfrpc0 - update to 10.0-9
libgfxdr0 - update to 10.0-9
glusterfs-geo-replication - update to 10.0-9
libglusterfs0 - update to 10.0-9
libgfapi-devel - update to 10.0-9
glusterfs-server (Ubuntu package) - addressed in versions 10.1-1ubuntu0.2, 10.3-4ubuntu0.2, 10.3-5ubuntu0.1
glusterfs-common (Ubuntu package) - addressed in versions 10.1-1ubuntu0.2, 10.3-4ubuntu0.2, 10.3-5ubuntu0.1
glusterfs-client (Ubuntu package) - addressed in versions 10.1-1ubuntu0.2, 10.3-4ubuntu0.2, 10.3-5ubuntu0.1
glusterfs - update to 10.4-1.fc37

• https://github.com/gluster/glusterfs/issues/3732

• Multiple vulnerabilities in GlusterFS
• Fedora 37 update for glusterfs
• Ubuntu update for glusterfs
• openEuler 20.03 LTS SP1 update for glusterfs
• openEuler 22.03 LTS update for glusterfs
• openEuler 22.03 LTS SP1 update for glusterfs
• openEuler 22.03 LTS SP2 update for glusterfs
• openEuler 22.03 LTS SP3 update for glusterfs