Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-14652

Опубликовано: 31 окт. 2018
Источник: ubuntu
Приоритет: medium
CVSS2: 4
CVSS3: 6.5

Описание

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

disco

not-affected

eoan

not-affected

esm-apps/bionic

released

3.13.2-1ubuntu1+esm1
esm-apps/focal

not-affected

esm-apps/xenial

released

3.7.6-1ubuntu1+esm1
esm-infra-legacy/trusty

released

3.4.2-1ubuntu1+esm1
focal

not-affected

Показывать по

4 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 7 лет назад

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

CVSS3: 6.5
nvd
больше 7 лет назад

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

CVSS3: 6.5
debian
больше 7 лет назад

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable ...

CVSS3: 6.5
github
больше 3 лет назад

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

4 Medium

CVSS2

6.5 Medium

CVSS3