VYPR
← All advisories
High severity8.8OSV Advisory· Published Oct 31, 2018· Updated Jun 17, 2026

CVE-2018-14651

CVE-2018-14651

Description

It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Gluster/GlusterfsOSV3 versions
    v3.12.0, v3.12.0alpha1, v3.12.0rc0, …+ 2 more
    • (no CPE)range: v3.12.0, v3.12.0alpha1, v3.12.0rc0, …
    • cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*range: >=3.12,<=3.12.14
    • (no CPE)
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Server2 versions
    cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.