Lucene search

K
ubuntucveUbuntu.comUB:CVE-2018-14652
HistoryOct 31, 2018 - 12:00 a.m.

CVE-2018-14652

2018-10-3100:00:00
ubuntu.com
ubuntu.com
14

0.004 Low

EPSS

Percentile

72.5%

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a
buffer overflow in the ‘features/index’ translator via the code handling
the ‘GF_XATTR_CLRLK_CMD’ xattr in the ‘pl_getxattr’ function. A remote
authenticated attacker could exploit this on a mounted volume to cause a
denial of service.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchglusterfs< 3.13.2-1ubuntu1+esm1UNKNOWN
ubuntu14.04noarchglusterfs< 3.4.2-1ubuntu1+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchglusterfs< 3.7.6-1ubuntu1+esm1UNKNOWN