CVE-2017-15085

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017...

5.9 Medium

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.71%Up 0.9 points since Apr 14, 2021

What each source reports

NVD Score used5.9

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: CVE-2017-15085
CVSS 3.0: 5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness: CWE-300, CWE-200
Updated: 2026-11-02

CVE ListNo score

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: CVE-2017-15085
Weakness: CWE-300
Updated: 2026-11-02

EUVDEUVD-2017-6554No score

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: EUVD-2017-6554
Updated: 2026-11-03

GitHub AdvisoriesGHSA-44p5-fr45-3p7f5.9

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017...

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

Record: GHSA-44p5-fr45-3p7f
CVSS 3.0: 5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200, CWE-300
Updated: 2026-11-02

OSVRHSA-2017:31108.1

Red Hat Security Advisory: samba security update

Record: RHSA-2017:3110
CVSS 3.0: 8.1 HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`ctdb` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`ctdb-tests` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libsmbclient` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libsmbclient-devel` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libwbclient` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`libwbclient-devel` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-client` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-client-libs` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-common` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs

Show 17 moreShow less

Affected packages
Package	Affected	Fixed
`samba-common-libs` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-common-tools` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-dc` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-dc-libs` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-debuginfo` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-devel` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-krb5-printing` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-libs` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-pidl` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-python` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-test` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-test-libs` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-vfs-glusterfs` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-clients` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-krb5-locator` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs
`samba-winbind-modules` Red Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs	before 0:4.6.3-8.el6rhs	0:4.6.3-8.el6rhs

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-15085 is a medium vulnerability (CVSS 5.9) in Redhat Gluster Storage, published November 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. No source names a fixed version.

References

Show 13 moreShow less