Every CVE Search/ Get API key

CVE-2017-15096

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in...

3.3 LowFix available

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.32%Down 0.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 3.3

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
CVE-2017-15096
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
CVE-2017-15096
Updated
2026-11-02
EUVDEUVD-2017-6563 No score

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
EUVD-2017-6563
Updated
2026-11-03
GitHub AdvisoriesGHSA-vxhq-jp57-mcrm 3.3

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in...

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
GHSA-vxhq-jp57-mcrm
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-476
Updated
2026-11-02
OSV 3.3

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
CVE-2017-15096
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2017-15096 3.3

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
DEBIAN-CVE-2017-15096
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHEA-2019:3249 1.8

Red Hat Enhancement Advisory: glusterfs bug fix and enhancement update

Record
RHEA-2019:3249
CVSS 3.0
1.8 LowCVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2017-15096 3.3

A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

Record
UBUNTU-CVE-2017-15096
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glusterfs
Debian:12
 before 3.12.2-2
3.12.2-2
glusterfs
Debian:13
 before 3.12.2-2
3.12.2-2
glusterfs
Debian:14
 before 3.12.2-2
3.12.2-2
glusterfs
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-api
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-api-devel
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-cli
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-client-xlators
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-debuginfo
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-devel
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
Show 33 moreShow less
Affected packages
PackageAffectedFixed
glusterfs-events
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-fuse
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-ganesha
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-geo-replication
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-libs
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-rdma
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-resource-agents
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
glusterfs-server
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
python2-gluster
Red Hat:storage:3.5:server:el7
 before 0:6.0-21.el7rhgs
0:6.0-21.el7rhgs
redhat-release-server
Red Hat:storage:3.5:server:el7
 before 0:7.7-16.el7rhgs
0:7.7-16.el7rhgs
redhat-storage-logos
Red Hat:storage:3.5:server:el7
 before 0:70.7.0-3.el7rhgs
0:70.7.0-3.el7rhgs
redhat-storage-server
Red Hat:storage:3.5:server:el7
 before 0:3.5.0.0-1.el7rhgs
0:3.5.0.0-1.el7rhgs
glusterfs
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-api
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-api-devel
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-cli
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-client-xlators
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-debuginfo
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-devel
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-fuse
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-libs
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-rdma
Red Hat:enterprise_linux:7::hypervisor
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-api
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-api-devel
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-cli
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-client-xlators
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-debuginfo
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-devel
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-fuse
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-libs
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
glusterfs-rdma
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7
python2-gluster
Red Hat:storage:3:client:el7
 before 0:6.0-21.el7
0:6.0-21.el7

History

History
RecordedChangedSources
affected
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-15096 is a low vulnerability (CVSS 3.3) in Gluster Glusterfs, published October 26, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in glusterfs 3.12.2-2.

References

Show 149 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open