A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Glusterfs | Gluster | * | 3.9.0 (including) |
| Native Client for RHEL 7 for Red Hat Storage | RedHat | glusterfs-0:6.0-21.el7 | * |
| Red Hat Gluster Storage 3.5 for RHEL 7 | RedHat | glusterfs-0:6.0-21.el7rhgs | * |
| Red Hat Gluster Storage 3.5 for RHEL 7 | RedHat | redhat-release-server-0:7.7-16.el7rhgs | * |
| Red Hat Gluster Storage 3.5 for RHEL 7 | RedHat | redhat-storage-logos-0:70.7.0-3.el7rhgs | * |
| Red Hat Gluster Storage 3.5 for RHEL 7 | RedHat | redhat-storage-server-0:3.5.0.0-1.el7rhgs | * |
| Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 | RedHat | glusterfs-0:6.0-21.el7 | * |
| Glusterfs | Ubuntu | artful | * |
| Glusterfs | Ubuntu | upstream | * |
| Glusterfs | Ubuntu | zesty | * |