medium5.3
CVE-2018-10924
It was discovered that fsync(2) system call in glusterfs client code leaks memory.
Impact
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gluster | Glusterfs | from 3.12.11 before 3.12.14 from 4.0.0 before 4.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10924
- https://review.gluster.org/#/c/glusterfs/+/20723/
- https://security.gentoo.org/glsa/201904-06
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00035.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10924
- https://review.gluster.org/#/c/glusterfs/+/20723/
- https://security.gentoo.org/glsa/201904-06