CVE-2018-14652 PUBLISHED

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

EPSS 2.30% · 84.6th percentile

Risk Scores

EPSS Score
2.30%
84.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSglusterfs3.13.2-1ubuntu1, 0, 3.11.2-1
Ubuntu:Pro:14.04:LTSglusterfs3.2.7-3ubuntu2, 3.4.1-1ubuntu1, 3.4.1-2ubuntu1
Ubuntu:Pro:16.04:LTSglusterfs3.7.3-1ubuntu1, 3.7.3-1ubuntu2, 3.7.6-1ubuntu1

Timeline

References

Open in Interactive Console →