Lucene search

K
osvGoogleOSV:CVE-2018-10907
HistorySep 04, 2018 - 1:29 p.m.

CVE-2018-10907

2018-09-0413:29:11
Google
osv.dev
5

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using ‘alloca(3)’. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.