https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:50:45.098418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-06920 cnvd-2019-06920 2026-10-03T14:50:45.106370+00:00 cnvd-2019-06920 https://cve.radiocsirt.org/vuln/euvd-2026-67145 EUVD-2026-67145 2026-10-03T14:50:45.106405+00:00 EUVD-2026-67145 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14652 fkie_cve-2018-14652 2026-10-03T14:50:45.106419+00:00

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-qg95-5vw5-jwjv GHSA-qg95-5vw5-jwjv 2026-10-03T14:50:45.106458+00:00

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2018-14652 gsd-2018-14652 2026-10-03T14:50:45.106477+00:00 gsd-2018-14652 https://cve.radiocsirt.org/vuln/rhsa-2018:3431 RHSA-2018:3431 — Red Hat Security Advisory: glusterfs security and bug fix update 2026-10-03T14:50:45.106488+00:00

glusterfs: glusterfs server exploitable via symlinks to relative paths glusterfs: Buffer overflow in "features/locks" translator allows for denial of service glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message glusterfs: "features/index" translator can create arbitrary, empty files glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14652 UBUNTU-CVE-2018-14652 2026-10-03T14:50:45.106516+00:00

Affected: Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.