{
  "fix": "glusterfs-server 3.13.2-1ubuntu1\u002Besm1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-glusterfs-server-3.13.2-1ubuntu1-esm1",
  "summary": "glusterfs-server 3.13.2-1ubuntu1\u002Besm1, released November 1, 2018, fixes 21 CVEs in glusterfs-server. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "glusterfs-server 3.13.2-1ubuntu1\u002Besm1 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2018-11-01T07:29:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 21 CVEs, none high severity",
  "supported": false,
  "cveCount": 21,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.05487,
  "appliesTo": [
    {
      "product": "glusterfs-server",
      "productUrl": "https://patchblox.com/security/product/linux/glusterfs-server",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.13.2-1ubuntu1\u002Besm1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2018-1088",
      "url": "https://patchblox.com/security/cve/CVE-2018-1088",
      "title": "glusterfs-client: A privilege escalation flaw was found in gluster 3.x snapshot scheduler",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.05487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10907",
      "url": "https://patchblox.com/security/cve/CVE-2018-10907",
      "title": "glusterfs-client: It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03338,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10929",
      "url": "https://patchblox.com/security/cve/CVE-2018-10929",
      "title": "glusterfs-client: A flaw was found in RPC request using gfs2_create_req in glusterfs server",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14651",
      "url": "https://patchblox.com/security/cve/CVE-2018-14651",
      "title": "glusterfs-client: It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10904",
      "url": "https://patchblox.com/security/cve/CVE-2018-10904",
      "title": "glusterfs-client: It was found that glusterfs server does not properly sanitize file paths in the \u0022trusted.io-stats-dump\u0022 extended attr...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10911",
      "url": "https://patchblox.com/security/cve/CVE-2018-10911",
      "title": "glusterfs-client: A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02871,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14653",
      "url": "https://patchblox.com/security/cve/CVE-2018-14653",
      "title": "glusterfs-client: The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the \u0027__serve...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02769,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14652",
      "url": "https://patchblox.com/security/cve/CVE-2018-14652",
      "title": "glusterfs-client: The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the \u0027features/index\u0027 tr...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02747,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10928",
      "url": "https://patchblox.com/security/cve/CVE-2018-10928",
      "title": "glusterfs-client: A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02678,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14661",
      "url": "https://patchblox.com/security/cve/CVE-2018-14661",
      "title": "glusterfs-client: It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with R...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02655,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14654",
      "url": "https://patchblox.com/security/cve/CVE-2018-14654",
      "title": "glusterfs-common: The Gluster file system through version 4.1.4 is vulnerable to abuse of the \u0027features/index\u0027 translator",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10927",
      "url": "https://patchblox.com/security/cve/CVE-2018-10927",
      "title": "glusterfs-client: A flaw was found in RPC request using gfs3_lookup_req in glusterfs server",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10926",
      "url": "https://patchblox.com/security/cve/CVE-2018-10926",
      "title": "glusterfs-client: A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14660",
      "url": "https://patchblox.com/security/cve/CVE-2018-14660",
      "title": "glusterfs-client: A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KE...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02515,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10914",
      "url": "https://patchblox.com/security/cve/CVE-2018-10914",
      "title": "glusterfs-client: It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14659",
      "url": "https://patchblox.com/security/cve/CVE-2018-14659",
      "title": "glusterfs-client: The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the \u0027...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10930",
      "url": "https://patchblox.com/security/cve/CVE-2018-10930",
      "title": "glusterfs-client: A flaw was found in RPC request using gfs3_rename_req in glusterfs server",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01973,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10913",
      "url": "https://patchblox.com/security/cve/CVE-2018-10913",
      "title": "glusterfs-client: An information disclosure vulnerability was discovered in glusterfs server",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01957,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10924",
      "url": "https://patchblox.com/security/cve/CVE-2018-10924",
      "title": "glusterfs-client: It was discovered that fsync(2) system call in glusterfs client code leaks memory",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01898,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10923",
      "url": "https://patchblox.com/security/cve/CVE-2018-10923",
      "title": "glusterfs-client: It was found that the \u0022mknod\u0022 call derived from mknod(2) can create files pointing to devices on a glusterfs server node",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01562,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-10841",
      "url": "https://patchblox.com/security/cve/CVE-2018-10841",
      "title": "glusterfs-client: glusterfs is vulnerable to privilege escalation on gluster server nodes",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T01:51:14Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}