CVE-2017-15087
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017...
CVE-2017-15087 is a high vulnerability (CVSS 7.5) in Redhat Gluster Storage, published November 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 3.0, NVD
- Exploit chance
- 2.08%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ctdbRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
ctdb-testsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libsmbclientRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libsmbclient-develRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libwbclientRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libwbclient-develRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
sambaRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-clientRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-client-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-commonRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-common-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-common-toolsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-dcRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-dc-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-debuginfoRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-develRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-krb5-printingRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-pidlRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-pythonRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-testRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-test-libsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-vfs-glusterfsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbindRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-clientsRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-krb5-locatorRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-modulesRed Hat:storage:3.3:samba:el6 From an advisory covering 3 CVEs | before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
What each source reports
NVD Score used
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
CVE-2017-15087- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
CVE-2017-15087- Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2017-6556No score
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
EUVD-2017-6556- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxq5-xj37-9fx7
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017...
It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
GHSA-xxq5-xj37-9fx7- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHSA-2017:3110
Red Hat Security Advisory: samba security update
- Record
RHSA-2017:3110- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-13
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
access.redhat.com/errata/RHSA-2017:3110
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15087
securityfocus.com/bid/101556
nvd.nist.gov/vuln/detail/CVE-2017-15087
Show 13 moreShow less
github.com/advisories/GHSA-xxq5-xj37-9fx7
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3110.json
cve.org/CVERecord?id=CVE-2017-15085