[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEso2vy_Gls2UhV5vRpGfyS1i5mmqjqCKbXSzAQ1B5sM":3,"g5a-risk:CVE-2018-10907":206},{"success":4,"data":5,"meta":204},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":26,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":81,"references":82,"referencesCount":121,"weaknesses":122,"weaknessesCount":136,"isActivelyExploited":137,"cisaInfo":26,"otxData":26,"relatedBlogPosts":138,"seoMetadata":139,"configurations":164,"relatedVendorCves":202,"notableEvents":203},"CVE-2018-10907","What is CVE-2018-10907?","It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.","It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers...","2018-09-04T13:29:11.017","2021-12-16T18:49:32.763",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"secalert@redhat.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":41,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.03364,[47,47,47,47,47,47,47],"High",[51,56,61,65,68,73,76],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"gluster","glusterfs","*","cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"redhat","virtualization_host","4.0","cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",{"vendor":57,"product":62,"version":63,"criteria":64,"vulnerable":4},"enterprise_linux_server","6.0","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":57,"product":62,"version":66,"criteria":67,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":71,"criteria":72,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":74,"criteria":75,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":77,"product":78,"version":79,"criteria":80,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",7,[83,89,93,96,99,104,108,111,117],{"url":84,"source":85,"tags":86},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-01\u002Fmsg00035.html","Opensuse",[87,88],"Mailing List","Third Party Advisory",{"url":90,"source":91,"tags":92},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2607","Red Hat",[88],{"url":94,"source":91,"tags":95},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2608",[88],{"url":97,"source":91,"tags":98},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3470",[88],{"url":100,"source":91,"tags":101},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2018-10907",[102,103,88],"Issue Tracking","Mitigation",{"url":105,"source":106,"tags":107},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F09\u002Fmsg00021.html","Debian",[87,88],{"url":109,"source":106,"tags":110},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F11\u002Fmsg00000.html",[87,88],{"url":112,"source":113,"tags":114},"https:\u002F\u002Freview.gluster.org\u002F#\u002Fc\u002Fglusterfs\u002F+\u002F21070\u002F","Gluster",[115,116],"Patch","Vendor Advisory",{"url":118,"source":119,"tags":120},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201904-06","Gentoo",[88],9,[123,131],{"id":124,"name":125,"description":126,"extendedDescription":127,"status":128,"abstraction":129,"structure":130},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",{"id":132,"name":133,"description":134,"extendedDescription":127,"status":128,"abstraction":135,"structure":130},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",2,false,[],{"title":140,"metaDescription":141,"keywords":142,"canonicalUrl":143,"structuredData":144},"What is CVE-2018-10907? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-10907, a high severity cyber security vulnerability from 2018. It was found that glusterfs server is vulnerable to multipl...","CVE-2018-10907, CVE-2018-10907 vulnerability, CVE-2018-10907 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, gluster security, redhat security, debian security, opensuse security, glusterfs vulnerability, virtualization_host vulnerability, enterprise_linux_server vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-10907",{"@context":145,"@type":146,"headline":140,"description":141,"datePublished":10,"dateModified":11,"author":147,"publisher":151,"about":155,"mainEntityOfPage":159,"articleSection":162,"keywords":163},"https:\u002F\u002Fschema.org","TechArticle",{"@type":148,"name":149,"url":150},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":148,"name":149,"url":150,"logo":152},{"@type":153,"url":154},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":156,"name":6,"description":157,"additionalType":158},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":160,"@id":161},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-10907","Cybersecurity","CVE-2018-10907, CVE-2018-10907 vulnerability, CVE-2018-10907 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[165,178,188,196],{"Operator":26,"Negate":26,"Nodes":166},[167],{"Operator":168,"Negate":26,"CPEMatch":169},"OR",[170,174],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":172,"VersionEndExcluding":173,"VersionEndIncluding":26},"FB3DEA10-0AA0-4A16-8A90-6C59FDF2A702","3.12.0","3.12.14",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":176,"VersionEndExcluding":177,"VersionEndIncluding":26},"CADA8A6E-EC33-4BDF-AAAC-D10AC2A83D35","4.1.0","4.1.4",{"Operator":26,"Negate":26,"Nodes":179},[180],{"Operator":168,"Negate":26,"CPEMatch":181},[182,184,186],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BB28F9AF-3D06-4532-B397-96D7E4792503",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Operator":26,"Negate":26,"Nodes":189},[190],{"Operator":168,"Negate":26,"CPEMatch":191},[192,194],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":26,"Negate":26,"Nodes":197},[198],{"Operator":168,"Negate":26,"CPEMatch":199},[200],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",[],[],{"lastModified":11,"cacheTime":205,"version":39},1792375302815,{"score":207,"band":208,"action":209,"scoredAt":210},49,"Medium","Plan remediation","2026-10-16T06:44:46.476501+00:00"]