EPSS
Percentile
68.8%
libglusterfs.so is vulnerable to denial of service (DoS) attacks. The library contains a memory leak in the client code when the fsync(2) system call is used, allowing a malicious user to cause a DoS condition by consuming the system’s memory.
fsync(2)
bugzilla.redhat.com/show_bug.cgi?id=1611785
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10924
review.gluster.org/#/c/glusterfs/+/20723/
security.gentoo.org/glsa/201904-06