https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:36:33 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-06922 cnvd-2019-06922 https://cve.radiocsirt.org/vuln/cnvd-2019-06922 https://cve.radiocsirt.org/vuln/euvd-2026-67168 EUVD-2026-67168 https://cve.radiocsirt.org/vuln/euvd-2026-67168 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14659 <p>The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the &#39;GF_XATTR_IOSTATS_DUMP_KEY&#39; xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling &#39;setxattr(2)&#39; to trigger a state dump and create an arbitrary number of files in the server&#39;s runtime directory.</p> <p>The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the &#39;GF_XATTR_IOSTATS_DUMP_KEY&#39; xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling &#39;setxattr(2)&#39; to trigger a state dump and create an arbitrary number of files in the server&#39;s runtime directory.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-14659 https://cve.radiocsirt.org/vuln/ghsa-75jx-33j6-76c5 <p>The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the &#39;GF_XATTR_IOSTATS_DUMP_KEY&#39; xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling &#39;setxattr(2)&#39; to trigger a state dump and create an arbitrary number of files in the server&#39;s runtime directory.</p> <p>The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the &#39;GF_XATTR_IOSTATS_DUMP_KEY&#39; xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling &#39;setxattr(2)&#39; to trigger a state dump and create an arbitrary number of files in the server&#39;s runtime directory.</p> https://cve.radiocsirt.org/vuln/ghsa-75jx-33j6-76c5 https://cve.radiocsirt.org/vuln/gsd-2018-14659 gsd-2018-14659 https://cve.radiocsirt.org/vuln/gsd-2018-14659 https://cve.radiocsirt.org/vuln/rhsa-2018:3431 <p>glusterfs: glusterfs server exploitable via symlinks to relative paths glusterfs: Buffer overflow in &#34;features/locks&#34; translator allows for denial of service glusterfs: Heap-based buffer overflow via &#34;gf_getspec_req&#34; RPC message glusterfs: &#34;features/index&#34; translator can create arbitrary, empty files glusterfs: Unlimited file creation via &#34;GF_XATTR_IOSTATS_DUMP_KEY&#34; xattr allows for denial of service glusterfs: Repeat use of &#34;GF_META_LOCK_KEY&#34; xattr allows for memory exhaustion glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service</p> <p>glusterfs: glusterfs server exploitable via symlinks to relative paths glusterfs: Buffer overflow in &#34;features/locks&#34; translator allows for denial of service glusterfs: Heap-based buffer overflow via &#34;gf_getspec_req&#34; RPC message glusterfs: &#34;features/index&#34; translator can create arbitrary, empty files glusterfs: Unlimited file creation via &#34;GF_XATTR_IOSTATS_DUMP_KEY&#34; xattr allows for denial of service glusterfs: Repeat use of &#34;GF_META_LOCK_KEY&#34; xattr allows for memory exhaustion glusterfs: features/locks translator passes an user-controlled string to snprintf without a proper format string resulting in a denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3431 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14659 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs</p> <p>The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the &#39;GF_XATTR_IOSTATS_DUMP_KEY&#39; xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling &#39;setxattr(2)&#39; to trigger a state dump and create an arbitrary number of files in the server&#39;s runtime directory.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs</p> <p>The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the &#39;GF_XATTR_IOSTATS_DUMP_KEY&#39; xattr. A remote, authenticated attacker could exploit this by mounting a Gluster volume and repeatedly calling &#39;setxattr(2)&#39; to trigger a state dump and create an arbitrary number of files in the server&#39;s runtime directory.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14659