Description
It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
The Gluster Project glusterfs-server
3.8.4affected
References
- https://access.redhat.com/errata/RHSA-2018:3431 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14661 ↗
- https://lists.debian.org/debian-lts-announce/2018/11/msg00003.html ↗
- https://access.redhat.com/errata/RHSA-2018:3432 ↗
- https://access.redhat.com/errata/RHSA-2018:3470 ↗
- https://security.gentoo.org/glsa/201904-06 ↗
- https://lists.debian.org/debian-lts-announce/2021/11/msg00000.html ↗