{"id":"CVE-2018-14661","aliases":["AZL-38872","DEBIAN-CVE-2018-14661","DLA-1565-1","DLA-2806-1","EUVD-2018-6556","GHSA-mhq6-64cp-3vx7","RHSA-2018:3431","RHSA-2018:3432","RHSA-2018:3470","UBUNTU-CVE-2018-14661","USN-4770-1"],"status":"published","title":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8...","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02655,"percentile":0.85774,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-134","CWE-20"],"published":"2018-10-31T20:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glusterfs","fixed_in":["5.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","fixed_in":["3.4.2-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","fixed_in":["3.7.6-1ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","fixed_in":["3.13.2-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2+deb8u5"}]}],"versions":["3.5.2-2","3.5.2-2+deb8u1","3.5.2-2+deb8u2","3.5.2-2+deb8u3","3.5.2-2+deb8u4"],"bundled":5},{"source":"osv","ecosystem":"Debian:9","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.8-1+deb9u1"}]}],"versions":["3.8.8-1"],"bundled":19},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-events","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el6","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1.0-1.el6rhs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-events","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3.4:server:el7","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1.0-1.el7rhgs"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-client-xlators","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el7","package":"python2-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.2-25.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20181026.0.el7_6"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"python-imgbased","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.29-1.el7ev"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-7.3.el7"}]}],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"],"bundled":22}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gluster","product":"glusterfs"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_host"},{"vendor":"the gluster project","product":"glusterfs-server"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3431","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14661","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00003.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3432","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3470","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201904-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14661","tags":["web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636880","tags":["report"]},{"url":"https://github.com/advisories/GHSA-mhq6-64cp-3vx7"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14661","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643194","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3431.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14651","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14651","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14651","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14652","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14652","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14652","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14653","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14653","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14653","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14659","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14660","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14661","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643355","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3432.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1501276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1596008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1613231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632585","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3470.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10858","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10858","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10858","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2018-10858.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10873","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10873","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10873","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10904","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10907","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10911","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10913","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10914","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10914","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10923","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10926","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10926","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10927","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10927","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10928","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10929","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10929","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000805","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14661","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/10/31/5","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4770-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14660","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-14661","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:00:00Z","modified":"2024-08-05T09:38:12.978Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6556","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:00:00Z","modified":"2024-08-05T09:38:12Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:46.259365Z"}],"ghsa":[{"id":"GHSA-mhq6-64cp-3vx7","title":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8...","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2022-05-13T01:04:43Z","modified":"2023-02-10T05:06:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20","CWE-134"],"updated_at":"2026-11-02T14:54:02.310741Z"}],"nvd":[{"id":"CVE-2018-14661","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:29:00.323Z","modified":"2026-06-17T01:41:23.997Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-134"],"updated_at":"2026-11-02T14:04:47.196456Z"}],"osv":[{"id":"AZL-38872","title":"CVE-2018-14661 affecting package glusterfs for versions less than 5.1-1","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:29:00Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"CVE-2018-14661","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:29:00.323Z","modified":"2026-10-24T10:30:57.92485058Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14661","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:29:00.323Z","modified":"2026-10-23T18:03:00.045544269Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2018:3431","title":"Red Hat Security Advisory: glusterfs security and bug fix update","status":"published","published":"2024-09-22T16:32:45Z","modified":"2026-07-01T10:05:00Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3432","title":"Red Hat Security Advisory: glusterfs security and bug fix update","status":"published","published":"2024-09-22T16:32:52Z","modified":"2026-07-01T10:05:00Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3470","title":"Red Hat Security Advisory: Red Hat Virtualization security and bug fix update","status":"published","published":"2024-09-22T16:32:38Z","modified":"2026-07-01T10:05:01Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-14661","description":"It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.","status":"published","published":"2018-10-31T20:29:00Z","modified":"2026-02-04T02:48:47.801757Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-1565-1","title":"glusterfs - security update","status":"published","published":"2018-11-03T00:00:00Z","modified":"2026-03-09T01:21:16.221935Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2806-1","title":"glusterfs - security update","status":"published","published":"2021-11-01T00:00:00Z","modified":"2026-03-09T01:23:07.332286Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"USN-4770-1","title":"glusterfs vulnerabilities","description":"It was discovered that GlusterFS incorrectly handled network requests. An\nattacker could possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 14.04 ESM. (CVE-2014-3619)\n\nIt was discovered that GlusterFS incorrectly handled user permissions. An\nauthenticated attacker could possibly use this to add himself to a trusted\nstorage pool and perform privileged operations on volumes. This issue only\naffected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-10841)\n\nIt was discovered that GlusterFS incorrectly handled mounting gluster\nvolumes. An attacker could possibly use this issue to also mount shared\ngluster volumes and escalate privileges through malicious cronjobs. This\nissue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-1088)\n\nIt was discovered that GlusterFS incorrectly handled file paths. An\nattacker could possibly use this issue to create arbitrary files and\nexecute arbitrary code. (CVE-2018-10904)\n\nIt was discovered that GlusterFS incorrectly handled mounting volumes. An\nattacker could possibly use this issue to cause a denial of service or run\narbitrary code. (CVE-2018-10907)\n\nIt was discovered that GlusterFS incorrectly handled negative key length\nvalues. An attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2018-10911)\n\nIt was discovered that GlusterFS incorrectly handled FUSE requests. An\nattacker could use this issue to obtain sensitive information.\n(CVE-2018-10913, CVE-2018-10914)\n\nIt was discovered that GlusterFS incorrectly handled the file creation\nprocess. An authenticated attacker could possibly use this issue to create\narbitrary files and obtain sensitive information. (CVE-2018-10923)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. An\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-10924)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. An\nattacker could possibly use this issue to write files to an arbitrary\nlocation and execute arbitrary code. (CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930)\n\nIt was discovered that the fix for CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930 was incomplete. A remote\nauthenticated attacker could possibly use this issue to execute arbitrary\ncode or cause a denial of service. (CVE-2018-14651)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to cause a\ndenial of service. (CVE-2018-14652)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice or other unspecified impact. (CVE-2018-14653)\n\nIt was discovered that GlusterFS incorrectly handled mount volumes\noperation. A remote attacker could possibly use this issue to create\narbitrary files. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14654)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to create\narbitrary files. (CVE-2018-14659)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. A\nremote authenticated attacker could possibly use this is issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14660)\n\nIt was discovered that GlusterFS incorrectly handled strings. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. (CVE-2018-14661)\n","status":"published","published":"2021-03-15T20:13:19Z","modified":"2026-06-29T13:48:13.075405496Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}