CVE-2018-10924CWE-400

It was discovered that fsync(2) system call in glusterfs client code leaks memory

Medium · published September 4, 2018

CVSS v3.0
5.3
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01898 · 79.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-09-04T15:00Z
EPSS history
Timeline
  • 04 SEP 15:00Z
    It was discovered that fsync(2) system call in glusterfs client code leaks memory
    cvelistv5