CVE Feed

    Dashboard / CVE / CVE-2014-3619

    CVE-2014-3619

    The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header.

    Published:Sep 12, 2014
    Last Modified:Apr 12, 2025
    EPS:Mar 27, 2015
    EPSS Score:0.01113
    CVSS Score:5

    Affected Products

    Vendor
    Gluster
    Product
    Glusterfs
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Redhat
    Product
    Rhel Common
    Vendor
    Redhat
    Product
    Storage

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-26253 (CVSS 7.5) — In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-rea…
    CVE-2022-48340 (CVSS 7.5) — In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-fre…
    CVE-2018-14651 (CVSS 8.8) — It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-109…
    CVE-2018-14660 (CVSS 6.5) — A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_…
    CVE-2018-14661 (CVSS 6.5) — It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped…
    CVE-2018-10927 (CVSS 8.1) — A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use…
    CVE-2018-10923 (CVSS 8.1) — It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs s…
    CVE-2018-10904 (CVSS 8.8) — It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extend…
    CVE-2018-10913 (CVSS 6.5) — An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr re…
    CVE-2018-10907 (CVSS 8.8) — It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High