# glusterfs-common 3.13.2-1ubuntu1+esm1: glusterfs-common 3.13.2-1ubuntu1+esm1 for Ubuntu 18.04.6 LTS (bionic)

glusterfs-common 3.13.2-1ubuntu1+esm1, released November 1, 2018, fixes 21 CVEs in glusterfs-common. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/linux/ubuntu-bionic-glusterfs-common-3.13.2-1ubuntu1-esm1
- Platform: Linux
- Released: Nov 1, 2018
- Priority: Routine (Closes 21 CVEs, none high severity)
- CVEs: 21, exploited: 0, on CISA KEV: 0

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [glusterfs-common](https://patchblox.com/security/data/product/linux/glusterfs-common.md) | Ubuntu 18.04.6 LTS (bionic) | 3.13.2-1ubuntu1+esm1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-1088](https://patchblox.com/security/data/cve/CVE-2018-1088.md) | Routine | glusterfs-client: A privilege escalation flaw was found in gluster 3.x snapshot scheduler | n/a | 0.0549 |  |
| [CVE-2018-10907](https://patchblox.com/security/data/cve/CVE-2018-10907.md) | Routine | glusterfs-client: It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-... | n/a | 0.0334 |  |
| [CVE-2018-10929](https://patchblox.com/security/data/cve/CVE-2018-10929.md) | Routine | glusterfs-client: A flaw was found in RPC request using gfs2_create_req in glusterfs server | n/a | 0.0334 |  |
| [CVE-2018-14651](https://patchblox.com/security/data/cve/CVE-2018-14651.md) | Routine | glusterfs-client: It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was... | n/a | 0.0323 |  |
| [CVE-2018-10904](https://patchblox.com/security/data/cve/CVE-2018-10904.md) | Routine | glusterfs-client: It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attr... | n/a | 0.0300 |  |
| [CVE-2018-10911](https://patchblox.com/security/data/cve/CVE-2018-10911.md) | Routine | glusterfs-client: A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values | n/a | 0.0287 |  |
| [CVE-2018-14653](https://patchblox.com/security/data/cve/CVE-2018-14653.md) | Routine | glusterfs-client: The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__serve... | n/a | 0.0277 |  |
| [CVE-2018-14652](https://patchblox.com/security/data/cve/CVE-2018-14652.md) | Routine | glusterfs-client: The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' tr... | n/a | 0.0275 |  |
| [CVE-2018-10928](https://patchblox.com/security/data/cve/CVE-2018-10928.md) | Routine | glusterfs-client: A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point... | n/a | 0.0268 |  |
| [CVE-2018-14661](https://patchblox.com/security/data/cve/CVE-2018-14661.md) | Routine | glusterfs-client: It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with R... | n/a | 0.0266 |  |
| [CVE-2018-14654](https://patchblox.com/security/data/cve/CVE-2018-14654.md) | Routine | glusterfs-common: The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator | n/a | 0.0263 |  |
| [CVE-2018-10927](https://patchblox.com/security/data/cve/CVE-2018-10927.md) | Routine | glusterfs-client: A flaw was found in RPC request using gfs3_lookup_req in glusterfs server | n/a | 0.0259 |  |
| [CVE-2018-10926](https://patchblox.com/security/data/cve/CVE-2018-10926.md) | Routine | glusterfs-client: A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server | n/a | 0.0258 |  |
| [CVE-2018-14660](https://patchblox.com/security/data/cve/CVE-2018-14660.md) | Routine | glusterfs-client: A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KE... | n/a | 0.0252 |  |
| [CVE-2018-10914](https://patchblox.com/security/data/cve/CVE-2018-10914.md) | Routine | glusterfs-client: It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash... | n/a | 0.0229 |  |
| [CVE-2018-14659](https://patchblox.com/security/data/cve/CVE-2018-14659.md) | Routine | glusterfs-client: The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the '... | n/a | 0.0217 |  |
| [CVE-2018-10930](https://patchblox.com/security/data/cve/CVE-2018-10930.md) | Routine | glusterfs-client: A flaw was found in RPC request using gfs3_rename_req in glusterfs server | n/a | 0.0197 |  |
| [CVE-2018-10913](https://patchblox.com/security/data/cve/CVE-2018-10913.md) | Routine | glusterfs-client: An information disclosure vulnerability was discovered in glusterfs server | n/a | 0.0196 |  |
| [CVE-2018-10924](https://patchblox.com/security/data/cve/CVE-2018-10924.md) | Routine | glusterfs-client: It was discovered that fsync(2) system call in glusterfs client code leaks memory | n/a | 0.0190 |  |
| [CVE-2018-10923](https://patchblox.com/security/data/cve/CVE-2018-10923.md) | Routine | glusterfs-client: It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node | n/a | 0.0156 |  |
| [CVE-2018-10841](https://patchblox.com/security/data/cve/CVE-2018-10841.md) | Routine | glusterfs-client: glusterfs is vulnerable to privilege escalation on gluster server nodes | n/a | 0.0123 |  |

---

Data as of 2026-11-12T07:53:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.