CVE-2018-14661

—

CVSS 3.1

6.5 medium

EPSS

3%p85

Published

Oct 31, 2018 (Oct 31, 2018)

Modified

Jun 17, 2026

Description

It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string attack. A remote, authenticated attacker could use this flaw to cause remote denial of service.

Vendors: gluster debian redhat
Products: glusterfs, debian linux, virtualization, virtualization host, enterprise linux server
Weakness: CWE-20, CWE-134
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.