CVE-2017-15086
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017...
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
7.4
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
CVE-2017-15086- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-300
- Updated
- 2026-11-02
CVE List No score
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
CVE-2017-15086- Weakness
- CWE-300
- Updated
- 2026-11-02
EUVDEUVD-2017-6555 No score
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
EUVD-2017-6555- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fr73-3m84-8rch
7.4
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017...
It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
GHSA-fr73-3m84-8rch- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-300
- Updated
- 2026-11-02
OSVRHSA-2017:3110
8.1
Red Hat Security Advisory: samba security update
- Record
RHSA-2017:3110- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ctdbRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
ctdb-testsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libsmbclientRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libsmbclient-develRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libwbclientRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libwbclient-develRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
sambaRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-clientRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-client-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-commonRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-common-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-common-toolsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-dcRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-dc-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-debuginfoRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-develRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-krb5-printingRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-pidlRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-pythonRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-testRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-test-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-vfs-glusterfsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbindRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-clientsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-krb5-locatorRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-modulesRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-15086 is a high vulnerability (CVSS 7.4) in Redhat Gluster Storage, published November 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. No source names a fixed version.
References
securityfocus.com/bid/101555
access.redhat.com/errata/RHSA-2017:3110
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15086
nvd.nist.gov/vuln/detail/CVE-2017-15086
access.redhat.com/security/cve/CVE-2017-15086
bugzilla.redhat.com/show_bug.cgi?id=1505785
Show 13 moreShow less
github.com/advisories/GHSA-fr73-3m84-8rch
access.redhat.com/security/updates/classification
access.redhat.com/errata/RHSA-2017:2858
bugzilla.redhat.com/show_bug.cgi?id=1505787
bugzilla.redhat.com/show_bug.cgi?id=1505788
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3110.json
access.redhat.com/security/cve/CVE-2017-15085
cve.org/CVERecord?id=CVE-2017-15085
nvd.nist.gov/vuln/detail/CVE-2017-15085
cve.org/CVERecord?id=CVE-2017-15086
access.redhat.com/security/cve/CVE-2017-15087
cve.org/CVERecord?id=CVE-2017-15087
nvd.nist.gov/vuln/detail/CVE-2017-15087