Total vulnerabilities in the database
The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.
| Software | From | Fixed in |
|---|---|---|
| redhat / gluster_storage | 3.0.0 | 3.1.2.x |
| redhat / gluster_storage | 4.1.0 | 4.1.8.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux_server | 6.0 | 6.0.x |
| redhat / enterprise_linux_virtualization | 4.0 | 4.0.x |
| redhat / enterprise_virtualization_host | 4.0 | 4.0.x |