Stack overflow

2018-09-0413:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using ‘alloca(3)’. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.

CPENameOperatorVersion
debian_linuxeq8.0
debian_linuxeq9.0
glusterfsge3.12.0
glusterfslt3.12.14
glusterfsge4.1.0
glusterfslt4.1.4
leapeq15.1
enterprise_linux_servereq7.0
enterprise_linux_servereq6.0
virtualization_hosteq4.0

Name	Operator	Version
debian_linux	eq	8.0
debian_linux	eq	9.0
glusterfs	ge	3.12.0
glusterfs	lt	3.12.14
glusterfs	ge	4.1.0
glusterfs	lt	4.1.4
leap	eq	15.1
enterprise_linux_server	eq	7.0
enterprise_linux_server	eq	6.0
virtualization_host	eq	4.0