https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:32:00.898330+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-02475 cnvd-2019-02475 2026-10-03T08:32:00.905735+00:00 cnvd-2019-02475 https://cve.radiocsirt.org/vuln/euvd-2026-67159 EUVD-2026-67159 2026-10-03T08:32:00.905767+00:00 EUVD-2026-67159 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14654 fkie_cve-2018-14654 2026-10-03T08:32:00.905781+00:00

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.

 https://cve.radiocsirt.org/vuln/ghsa-hv7q-959v-864g GHSA-hv7q-959v-864g 2026-10-03T08:32:00.905808+00:00

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.

 https://cve.radiocsirt.org/vuln/gsd-2018-14654 gsd-2018-14654 2026-10-03T08:32:00.905824+00:00 gsd-2018-14654 https://cve.radiocsirt.org/vuln/rhsa-2018:3431 RHSA-2018:3431 — Red Hat Security Advisory: glusterfs security and bug fix update 2026-10-03T08:32:00.905842+00:00

glusterfs: glusterfs server exploitable via symlinks to relative paths glusterfs: Buffer overflow in "features/locks" translator allows for denial of service glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message glusterfs: "features/index" translator can create arbitrary, empty files glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14654 UBUNTU-CVE-2018-14654 2026-10-03T08:32:00.905890+00:00

Affected: Ubuntu:Pro:18.04:LTS: glusterfs

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.