https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:36:32.092679+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-06922 cnvd-2019-06922 2026-10-03T08:36:32.174935+00:00 cnvd-2019-06922 https://cve.radiocsirt.org/vuln/euvd-2026-67168 EUVD-2026-67168 2026-10-03T08:36:32.174977+00:00 EUVD-2026-67168 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14659 fkie_cve-2018-14659 2026-10-03T08:36:32.174991+00:00

The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.

 https://cve.radiocsirt.org/vuln/ghsa-75jx-33j6-76c5 GHSA-75jx-33j6-76c5 2026-10-03T08:36:32.175024+00:00

The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.

 https://cve.radiocsirt.org/vuln/gsd-2018-14659 gsd-2018-14659 2026-10-03T08:36:32.175041+00:00 gsd-2018-14659 https://cve.radiocsirt.org/vuln/rhsa-2018:3431 RHSA-2018:3431 — Red Hat Security Advisory: glusterfs security and bug fix update 2026-10-03T08:36:32.175053+00:00

glusterfs: glusterfs server exploitable via symlinks to relative paths glusterfs: Buffer overflow in "features/locks" translator allows for denial of service glusterfs: Heap-based buffer overflow via "gf_getspec_req" RPC message glusterfs: "features/index" translator can create arbitrary, empty files glusterfs: Unlimited file creation via "GF_XATTR_IOSTATS_DUMP_KEY" xattr allows for denial of service glusterfs: Repeat use of "GF_META_LOCK_KEY" xattr allows for memory exhaustion glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14659 UBUNTU-CVE-2018-14659 2026-10-03T08:36:32.175083+00:00

Affected: Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs

The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF_XATTR_IOSTATS_DUMP_KEY' xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling 'setxattr(2)' to trigger a state dump and create an arbitrary number of files in the server's runtime directory.