CVE-2018-14654

The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.

Score
CVSS 3.1 6.5 Medium
Status
Modified - secalert@redhat.com
Published
2018-10-31
Last modified
2024-08-05
Weaknesses
CWE-22

Affected products

References

 
 
© AVABIS GmbH privacypolicy about