{"id":"CVE-2018-14659","aliases":["DEBIAN-CVE-2018-14659","DLA-1565-1","DLA-2806-1","EUVD-2018-6554","GHSA-75jx-33j6-76c5","RHSA-2018:3431","RHSA-2018:3432","RHSA-2018:3470","UBUNTU-CVE-2018-14659","USN-4770-1"],"status":"published","title":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service...","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02172,"percentile":0.8242,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2018-10-31T19:00:00Z","modified":"2026-10-24T10:30:23Z","fixes":[{"ecosystem":"Debian:12","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","fixed_in":["3.4.2-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","fixed_in":["3.7.6-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","fixed_in":["3.13.2-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2+deb8u5"}]}],"versions":["3.5.2-2","3.5.2-2+deb8u1","3.5.2-2+deb8u2","3.5.2-2+deb8u3","3.5.2-2+deb8u4"],"bundled":5},{"source":"osv","ecosystem":"Debian:9","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.8-1+deb9u1"}]}],"versions":["3.8.8-1"],"bundled":19},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-events","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1.0-1.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-events","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1.0-1.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"],"bundled":22}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"gluster_file_system"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_host"},{"vendor":"the gluster project","product":"glusterfs"},{"vendor":"unspecified","product":"glusterfs"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3431","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3432","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3470","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14659","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://security.gentoo.org/glsa/201904-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635929","tags":["report"]},{"url":"https://github.com/advisories/GHSA-75jx-33j6-76c5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14659","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643194","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3431.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14651","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14653","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14653","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14653","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14654","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14659","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14660","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14661","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643355","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3432.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632585","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3470.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10858","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2018-10858.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10904","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10907","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10911","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10923","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10926","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10926","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10928","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000805","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14659","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/10/31/5","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4770-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14661","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-14659","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2018-10-31T19:00:00Z","modified":"2024-08-05T09:38:13.101Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6554","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2018-10-31T19:00:00Z","modified":"2024-08-05T09:38:13Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:46.259365Z"}],"ghsa":[{"id":"GHSA-75jx-33j6-76c5","title":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service...","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2022-05-13T01:04:42Z","modified":"2023-02-02T18:30:56Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2018-14659","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2018-10-31T19:29:00.627Z","modified":"2026-06-17T01:41:23.713Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:47.196456Z"}],"osv":[{"id":"CVE-2018-14659","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2018-10-31T19:29:00.627Z","modified":"2026-10-24T10:30:23.689170251Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14659","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2018-10-31T19:29:00.627Z","modified":"2026-10-23T18:02:59.908061795Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2018:3431","title":"Red Hat Security Advisory: glusterfs security and bug fix update","status":"published","published":"2024-09-22T16:32:45Z","modified":"2026-07-01T10:05:00Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3432","title":"Red Hat Security Advisory: glusterfs security and bug fix update","status":"published","published":"2024-09-22T16:32:52Z","modified":"2026-07-01T10:05:00Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3470","title":"Red Hat Security Advisory: Red Hat Virtualization security and bug fix update","status":"published","published":"2024-09-22T16:32:38Z","modified":"2026-07-01T10:05:01Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-14659","description":"The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.","status":"published","published":"2018-10-31T19:29:00Z","modified":"2026-02-04T02:30:47.829238Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-1565-1","title":"glusterfs - security update","status":"published","published":"2018-11-03T00:00:00Z","modified":"2026-03-09T01:21:16.221935Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2806-1","title":"glusterfs - security update","status":"published","published":"2021-11-01T00:00:00Z","modified":"2026-03-09T01:23:07.332286Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"USN-4770-1","title":"glusterfs vulnerabilities","description":"It was discovered that GlusterFS incorrectly handled network requests. An\nattacker could possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 14.04 ESM. (CVE-2014-3619)\n\nIt was discovered that GlusterFS incorrectly handled user permissions. An\nauthenticated attacker could possibly use this to add himself to a trusted\nstorage pool and perform privileged operations on volumes. This issue only\naffected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-10841)\n\nIt was discovered that GlusterFS incorrectly handled mounting gluster\nvolumes. An attacker could possibly use this issue to also mount shared\ngluster volumes and escalate privileges through malicious cronjobs. This\nissue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-1088)\n\nIt was discovered that GlusterFS incorrectly handled file paths. An\nattacker could possibly use this issue to create arbitrary files and\nexecute arbitrary code. (CVE-2018-10904)\n\nIt was discovered that GlusterFS incorrectly handled mounting volumes. An\nattacker could possibly use this issue to cause a denial of service or run\narbitrary code. (CVE-2018-10907)\n\nIt was discovered that GlusterFS incorrectly handled negative key length\nvalues. An attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2018-10911)\n\nIt was discovered that GlusterFS incorrectly handled FUSE requests. An\nattacker could use this issue to obtain sensitive information.\n(CVE-2018-10913, CVE-2018-10914)\n\nIt was discovered that GlusterFS incorrectly handled the file creation\nprocess. An authenticated attacker could possibly use this issue to create\narbitrary files and obtain sensitive information. (CVE-2018-10923)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. An\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-10924)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. An\nattacker could possibly use this issue to write files to an arbitrary\nlocation and execute arbitrary code. (CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930)\n\nIt was discovered that the fix for CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930 was incomplete. A remote\nauthenticated attacker could possibly use this issue to execute arbitrary\ncode or cause a denial of service. (CVE-2018-14651)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to cause a\ndenial of service. (CVE-2018-14652)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice or other unspecified impact. (CVE-2018-14653)\n\nIt was discovered that GlusterFS incorrectly handled mount volumes\noperation. A remote attacker could possibly use this issue to create\narbitrary files. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14654)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to create\narbitrary files. (CVE-2018-14659)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. A\nremote authenticated attacker could possibly use this is issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14660)\n\nIt was discovered that GlusterFS incorrectly handled strings. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. (CVE-2018-14661)\n","status":"published","published":"2021-03-15T20:13:19Z","modified":"2026-06-29T13:48:13.075405496Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}