CVE-2017-15086

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017...

7.4 HighFix available

CVE-2017-15086 is a high vulnerability (CVSS 7.4) in Redhat Gluster Storage, published November 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. Fixed in ctdb 0:4.6.3-8.el6rhs.

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

1.71%Up 0.9 points since Apr 14, 2021

What each source reports

NVD Score used 7.4

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: CVE-2017-15086
CVSS 3.0: 7.4 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness: CWE-300
Updated: 2026-11-02

CVE List No score

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: CVE-2017-15086
Weakness: CWE-300
Updated: 2026-11-02

EUVDEUVD-2017-6555 No score

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: EUVD-2017-6555
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fr73-3m84-8rch 7.4

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017...

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: GHSA-fr73-3m84-8rch
CVSS 3.0: 7.4 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-300
Updated: 2026-11-02

OSVRHSA-2017:3110 8.1

Red Hat Security Advisory: samba security update

Record: RHSA-2017:3110
CVSS 3.0: 8.1 HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`ctdb` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`ctdb-tests` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libsmbclient` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libsmbclient-devel` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libwbclient` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libwbclient-devel` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-client` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-client-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-common` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs

Show 17 moreShow less

Affected packages
Package	Affected	Fixed
`samba-common-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-common-tools` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-dc` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-dc-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-debuginfo` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-devel` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-krb5-printing` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-pidl` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-python` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-test` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-test-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-vfs-glusterfs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-clients` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-krb5-locator` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-modules` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 13 moreShow less