NetSight
IP …
medium6.5

CVE-2018-10914

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of se…

Impact

It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.

Affected products

VendorProductAffected versions
GlusterGlusterfs
from 3.12.0 before 3.12.14
from 4.1.0 before 4.1.8
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
DebianDebian Linux
Versions 8.0, 9.0
OpensuseLeap
Version 15.1

Weakness classification

CWE-476

References