CVE-2018-14654 PUBLISHED

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.

EPSS 2.02% · 83.7th percentile

Risk Scores

EPSS Score
2.02%
83.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSglusterfs0, 3.11.2-1, 3.12.1-1

Timeline

References

Open in Interactive Console →