| Package | Affected versions | Patched versions |
|---|---|---|
| glusterfs | ≥ 3.12.0, < 3.12.14≥ 4.1.0, < 4.1.8 | 3.12.144.1.8 |
| virtualization host | = 4.0 |
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service. If gluster multiplexing is enabled this will result in a crash of multiple bricks and gluster volumes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free