gluster glusterfs CVE-2018-10927 vulnerability in Gluster and Other Products
Published on September 4, 2018

product logo product logo product logo product logo
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.


Products Associated with CVE-2018-10927

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-10927 are published in these products:

Glusterfs
Red Hat Virtualization Host
Debian Linux
Red Hat Enterprise Linux Server
Red Hat Virtualization
OpenSuse Leap

Affected Versions

Red Hat glusterfs Version n/a is affected by CVE-2018-10927

Exploit Probability

EPSS
2.59%
Percentile
85.41%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.