5.5
Medium
CVE-2018-10914 It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash…
Description
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glusterfs | Versions not published |
Other CVEs of glusterfs
The 12 CVEs of glusterfs →
CVE-2018-10930
A flaw was found in RPC request using gfs3_rename_req in glusterfs server
6.5
Medium
CVE-2018-10929
A flaw was found in RPC request using gfs2_create_req in glusterfs server
8.8
High
CVE-2018-10927
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server
7.1
High
CVE-2018-10926
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server
8.1
High