Mandriva Linux Security Advisory : glusterfs (MDVSA-2015:211)

Updated glusterfs packages fix security vulnerability : glusterfs was vulnerable to a fragment header infinite loop denial of service attack CVE-2014-3619. Also, the glusterfsd SysV init script was failing to properly start the service. This was fixed by replacing it with systemd unit files for t...

Updated glusterfs packages fix security vulnerabilities

Updated glusterfs packages fix security vulnerability: glusterfs was vulnerable to a fragment header infinite loop denial of service attack CVE-2014-3619. Also, the glusterfsd SysV init script was failing to properly start the service. This was fixed by replacing it with systemd unit files for th...

MGASA-2015-0145 Updated glusterfs packages fix security vulnerabilities

Updated glusterfs packages fix security vulnerability: glusterfs was vulnerable to a fragment header infinite loop denial of service attack CVE-2014-3619. Also, the glusterfsd SysV init script was failing to properly start the service. This was fixed by replacing it with systemd unit files for th...

Red Hat GlusterFS Denial of Service Vulnerability

Red Hat GlusterFS is the United States Red Hat Red Hat company's set of open source distributed file system. A denial of service vulnerability exists in GlusterFS 3.5, which allows remote attackers to cause a denial of service via the "00000000" fragment header...

CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

DEBIAN-CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

Design/Logic Flaw

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

UBUNTU-CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

CVE-2014-3619

CVE-2014-3619 affects GlusterFS, specifically the __socket_proto_state_machine in GlusterFS 3.5, where a crafted 00000000 fragment header can trigger a remote denial of service via an infinite loop. Multiple connected sources confirm the root cause in the network handling path and document that a...

CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

PT-2015-3728 · Red Hat +1 · Glusterfs +1

Name of the Vulnerable Software and Affected Versions: GlusterFS version 3.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This is achieved by sending a specific fragment header, "00000000", to the socket proto state machine function...

openSUSE Security Update : glusterfs (openSUSE-2015-241)

glusterfs was updated to fix a fragment header infinite loop denial of service attack CVE-2014-3619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-241. The text description of...

openSUSE Security Update : glusterfs (openSUSE-2015-219)

glusterfs was updated to fix a fragment header infinite loop denial of service attack CVE-2014-3619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-219. The text description of...

Moderate: Red Hat Bug Fix Advisory: glusterfs enhancement update

Updated Glusterfs packages that add one enhancement are now available for Red Hat Storage 3 native client for Red Hat Common. Red Hat Storage is software-only, scale-out storage that provides flexible and affordable unstructured data storage for an enterprise. GlusterFS, a key building block of R...

glusterfs: fragment header infinite loop DoS

A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...

glusterfs: fragment header infinite loop DoS

A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...

Moderate: Red Hat Bug Fix Advisory: Red Hat Storage 3.0 enhancement and bug fix update #3

Updated glusterfs, gluster-afr, gluster-dht, distribution, build, gluster-nfs, gluster-quota, gluster-smb, gluster-snapshot, gluster-swift, glusterfs-geo-replication, glusterfs-rdma, and glusterfs-server packages that fix numerous bugs and add various enhancements are now available for Red Hat...