CVE-2018-10924
04.09.2018, 15:29
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gluster | glusterfs | 3.12.11 ≤ 𝑥 < 3.12.14 |
| gluster | glusterfs | 4.0.0 ≤ 𝑥 < 4.1.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-772 - Missing Release of Resource after Effective LifetimeThe software does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
References