CVE-2018-14653 PUBLISHED

The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.

EPSS 1.60% · 81.6th percentile

Risk Scores

EPSS Score
1.60%
81.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSglusterfs0, 3.7.6-1ubuntu1, 3.7.3-1ubuntu2
Ubuntu:Pro:18.04:LTSglusterfs3.13.2-1ubuntu1, 3.12.2-2, 3.12.3-1
Ubuntu:Pro:14.04:LTSglusterfs3.4.2-1ubuntu1, 3.4.1-2ubuntu1, 3.4.1-1ubuntu1

Timeline

References

Open in Interactive Console →