CVE-2018-14654

Name of the Vulnerable Software and Affected Versions Gluster file system versions through 4.1.4

Description The issue allows a remote attacker with access to mount volumes to exploit the GF XATTROP ENTRY IN KEY xattrop, creating arbitrary, empty files on the target server via abuse of the 'features/index' translator.

Recommendations For Gluster file system versions through 4.1.4, consider restricting access to the 'features/index' translator to minimize the risk of exploitation. As a temporary workaround, limit the use of the GF XATTROP ENTRY IN KEY xattrop until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.