NetSight
IP …
medium6.5

CVE-2018-14652

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XAT…

Impact

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

Affected products

VendorProductAffected versions
RedhatGluster Storage
from 3.0.0 through 3.1.2
from 4.1.0 through 4.1.8
DebianDebian Linux
Versions 8.0, 9.0
RedhatEnterprise Virtualization Host
Version 4.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Virtualization
Version 4.0

Weakness classification

CWE-120CWE-119

References