Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-10924

Опубликовано: 04 сент. 2018
Источник: nvd
CVSS3: 5.3
CVSS3: 6.5
CVSS2: 6.8
EPSS Низкий

Описание

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*
Версия от 3.12.11 (включая) до 3.12.14 (исключая)
cpe:2.3:a:gluster:glusterfs:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.1.4 (исключая)

EPSS

Процентиль: 72%
0.00728
Низкий

5.3 Medium

CVSS3

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-400
CWE-772

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 7 лет назад

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

CVSS3: 5.3
redhat
больше 7 лет назад

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

CVSS3: 5.3
debian
больше 7 лет назад

It was discovered that fsync(2) system call in glusterfs client code l ...

CVSS3: 6.5
github
больше 3 лет назад

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

suse-cvrf
около 6 лет назад

Security update for glusterfs

EPSS

Процентиль: 72%
0.00728
Низкий

5.3 Medium

CVSS3

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-400
CWE-772