CVE-2018-14660CWE-400

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr

Medium · published November 1, 2018

CVSS v3.0
6.5
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr. A remote, authenticated attacker could use this flaw to create multiple locks for single inode by using setxattr repetitively resulting in memory exhaustion of glusterfs server node.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02515 · 84.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-11-01T14:00Z
EPSS history
Timeline
  • 01 NOV 14:00Z
    A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr
    cvelistv5