CVE-2018-14652: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days.

The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. A remote authenticated attacker could exploit this on a mounted volume to cause a denial of service.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Virtualization: version 4.0 only
• Red Hat Enterprise Virtualization Host: version 4.0 only
• Red Hat Gluster Storage: from 3.0.0, up to and including 3.1.2; from 4.1.0, up to and including 4.1.8

Published 2018-10-31. Last modified 2026-06-17.