CVE-2014-3619

Description

The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header.

How to fix CVE-2014-3619

To remediate CVE-2014-3619, upgrade the affected package to a fixed version below.

• Debian/glusterfs—upgrade to 3.5.2-2 or later

Is CVE-2014-3619 being exploited?

Low — EPSS is 1.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 3.5.2-2

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2014-3619