Lucene search

K
osvGoogleOSV:CVE-2018-14660
HistoryNov 01, 2018 - 2:29 p.m.

CVE-2018-14660

2018-11-0114:29:00
Google
osv.dev
9

AI Score

6.3

Confidence

Low

EPSS

0.006

Percentile

79.6%

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.