CVE-2018-14651

8.8 highEPSS 3.2%

It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. A remote, authenticated attacker could use one of these flaws to execute arbitrary code, create arbitrary files, or cause denial of service on glusterfs server nodes via symlinks to relative paths.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2018-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
gluster:glusterfs
redhat:enterprise_linux

References

https://access.redhat.com/errata/RHSA-2018:3431
https://access.redhat.com/errata/RHSA-2018:3432
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14651
https://lists.debian.org/debian-lts-announce/2018/11/msg00003.html
https://security.gentoo.org/glsa/201904-06

Check your stack JSON