CVE-2018-14652: Buffer Overflow
The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GFXATTRCLRLKCMD' xattr in the 'plgetxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
Other sources
The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the "features/index" translator via the code handling the "GFXATTRCLRLKCMD" xattr in the "plgetxattr" function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-14652?
CVE-2018-14652 is a vulnerability in the Gluster file system that allows a remote authenticated attacker to cause a denial of service via a buffer overflow.
Which software versions are affected by CVE-2018-14652?
Gluster file system versions 3.0.0 to 3.12 and 4.1.0 to 4.1.4 are affected by CVE-2018-14652.
How severe is CVE-2018-14652?
CVE-2018-14652 has a severity score of 6.5 out of 10, which is considered medium severity.
How can an attacker exploit CVE-2018-14652?
An attacker with remote authenticated access can exploit CVE-2018-14652 by causing a buffer overflow through the 'features/index' translator in the Gluster file system, leading to a denial of service.
Is there a fix for CVE-2018-14652?
Yes, a fix for CVE-2018-14652 is available. Please refer to the official references for the respective software versions affected.