This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-14661 →

DEBIAN-CVE-2018-14661

It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulne...

Original description

The description as published by the source.

It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glusterfs

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]

Debian:13 glusterfs

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]

Debian:14 glusterfs

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-1"}]}]

References

advisory security-tracker.debian.org