Vulnetix
Try Vulnetix Request Demo
CVE-2018-14660 PUBLISHED

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.

EPSS 1.60% · 81.6th percentile

Risk Scores

EPSS Score
1.60%
81.6th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSglusterfs0, 3.11.2-1, 3.12.1-1

Timeline

References

Open in Interactive Console →