Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2018-14652
HistoryOct 31, 2018 - 7:29 p.m.

CVE-2018-14652

2018-10-3119:29:00
Debian Security Bug Tracker
security-tracker.debian.org
11

0.004 Low

EPSS

Percentile

72.5%

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the ‘features/index’ translator via the code handling the ‘GF_XATTR_CLRLK_CMD’ xattr in the ‘pl_getxattr’ function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.