CVE ID:	CVE-2018-10904
Description:	It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. Attacker can use this flaw to create files and execute arbitrary code. To exploit this attacker would require sufficient access to modify the extended attributes of files on a gluster volume.
Test IDs:	1.3.6.1.4.1.25623.1.0.852995
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10904 https://security.gentoo.org/glsa/201904-06 https://lists.debian.org/debian-lts-announce/2018/09/msg00021.html https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html RedHat Security Advisories: RHSA-2018:2607 https://access.redhat.com/errata/RHSA-2018:2607 RedHat Security Advisories: RHSA-2018:2608 https://access.redhat.com/errata/RHSA-2018:2608 RedHat Security Advisories: RHSA-2018:3470 https://access.redhat.com/errata/RHSA-2018:3470 SuSE Security Announcement: openSUSE-SU-2020:0079 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html