CVE-2018-10924: Gluster Glusterfs

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service attack by making gluster clients consume memory of the host machine.

Affected products

• Gluster Glusterfs: from 3.12.11, before 3.12.14 (fixed in 3.12.14); from 4.0.0, before 4.1.4 (fixed in 4.1.4)

Published 2018-09-04. Last modified 2026-06-17.