Unrated severityOSV Advisory· Published Nov 1, 2018· Updated Aug 5, 2024

CVE-2018-14660

Description

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gluster/GlusterfsOSV2 versions
branchpoint-3.2, v3.1.0, v3.1.1, …+ 1 more
- (no CPE)range: branchpoint-3.2, v3.1.0, v3.1.1, …
- (no CPE)range: <=4.1.4, <=3.1.2

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2018:3431mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2018:3432mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2018:3470mitrevendor-advisoryx_refsource_REDHAT
security.gentoo.org/glsa/201904-06mitrevendor-advisoryx_refsource_GENTOO
bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
lists.debian.org/debian-lts-announce/2021/11/msg00000.htmlmitremailing-listx_refsource_MLIST

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000