CVE-2017-15087

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017...

7.5 HighFix available

CVE-2017-15087 is a high vulnerability (CVSS 7.5) in Redhat Gluster Storage, published November 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in ctdb 0:4.6.3-8.el6rhs.

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

2.08%Up 1.2 points since Apr 14, 2021

What each source reports

NVD Score used 7.5

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: CVE-2017-15087
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: CVE-2017-15087
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2017-6556 No score

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: EUVD-2017-6556
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xxq5-xj37-9fx7 7.5

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017...

It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: GHSA-xxq5-xj37-9fx7
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSVRHSA-2017:3110 8.1

Red Hat Security Advisory: samba security update

Record: RHSA-2017:3110
CVSS 3.0: 8.1 HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`ctdb` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`ctdb-tests` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libsmbclient` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libsmbclient-devel` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libwbclient` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libwbclient-devel` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-client` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-client-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-common` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs

Show 17 moreShow less

Affected packages
Package	Affected	Fixed
`samba-common-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-common-tools` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-dc` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-dc-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-debuginfo` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-devel` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-krb5-printing` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-pidl` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-python` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-test` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-test-libs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-vfs-glusterfs` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-clients` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-krb5-locator` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-modules` Red Hat:storage:3.3:samba:el6	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 13 moreShow less