Security Advisory

CVE-2018-14652

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-31 19:00:00
Last updated 2024-08-05 09:38:12
Assigner redhat
CVSS score 6.5
State PUBLISHED

Description

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.