CVE:CVE-2018-14660
CNNVD:CNNVD-201810-1578
GlusterFS是Gluster公司的Gluster的文件系统。
GlusterFS中存在资源管理错误漏洞。该漏洞源于允许重复使用重复使用setxattr为单个inode创建多个锁，从而导致服务器节点的内存耗尽。
solution:Upgrade gluster glusterfs to a higher version than 3.1.2,4.1.4,and avoid the version [3.1.0,3.1.2],[4.1.0,4.1.4]; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0