Aller au contenu
6.5 Moyenne

CVE-2018-14660 A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY…

Description

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.

Produits et versions touchés

Produit Versions touchées Corrigé en
glusterfs Versions non publiées
Les 2 CVE de glusterfs →
Suivre cette CVE