Veracode Vulnerability DatabaseVERACODE:19588Denial Of Service (DoS) Through Memory Exhaustion
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
glusterfs server is vulnerable to denial of service attacks. Remote authenticated attackers could cause memory exhaustion of glusterfs server nodes via repeat use of “GF_META_LOCK_KEY” xattr resulting in denial of service conditions.
References
access.redhat.com/errata/RHSA-2018:3431
access.redhat.com/errata/RHSA-2018:3432
access.redhat.com/errata/RHSA-2018:3470
access.redhat.com/security/cve/CVE-2018-14660
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1632119
bugzilla.redhat.com/show_bug.cgi?id=1635926
bugzilla.redhat.com/show_bug.cgi?id=1643194
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14660
lists.debian.org/debian-lts-announce/2021/11/msg00000.html
security.gentoo.org/glsa/201904-06
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P