CVE-2018-10924 PUBLISHED

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

EPSS 0.73% · 72.5th percentile

Risk Scores

EPSS Score
0.73%
72.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSglusterfs0, 3.11.2-1, 3.12.1-1

Timeline

References

Open in Interactive Console →