CVE:CVE-2018-14654
CNNVD:CNNVD-201810-1555
Red Hat Gluster是美国红帽（Red Hat）公司的一套开源的分布式文件系统。该系统主要为媒体流、数据分析以及其他数据和带宽密集型任务创建大型分布式存储解决方案。
Red Hat Gluster 4.1.4及之前版本中存在路径遍历漏洞。远程攻击者可利用该漏洞在目标服务器上创建任意空文件。
solution:Upgrade redhat gluster_storage to a higher version than 4.1.4,and avoid the version (,4.1.4]; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0