Gluster File System
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:gluster_file_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Gluster File System (455aaca9-6ce4-5a43-b3bb-1b5042c5c4f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189464 |
pkg:deb/ubuntu/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189469 |
pkg:github/gluster/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189473 |
pkg:gitlab/redhat/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189477 |
pkg:gnu/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189481 |
pkg:rpm/centos/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189485 |
pkg:rpm/fedora/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189488 |
pkg:rpm/opensuse/glusterfs |
purl2cpe | 2026-06-01 10:12:56.189492 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14659 |
vulnerable | 2026-06-08 05:10:53.241734 |
Details available
MEDIUM (6.5)
The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.
Published: 2018-10-31T19:00:00.000Z
Updated: 2024-08-05T09:38:13.101Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.