The Gluster Project Glusterfs
4 CVEs affecting The Gluster Project Glusterfs. Latest disclosed: 2018-10-31. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14653 | High | 8.8 | 2018-10-31 | The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_re… |
CVE-2018-14659 | Medium | 6.5 | 2018-10-31 | The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote… |
CVE-2018-14654 | Medium | 6.5 | 2018-10-31 | The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could e… |
CVE-2018-14652 | Medium | 6.5 | 2018-10-31 | The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XAT… |