CVE-2017-15085
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017...
CVE-2017-15085 is a medium vulnerability (CVSS 5.9) in Redhat Gluster Storage, published November 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. Fixed in ctdb 0:4.6.3-8.el6rhs.
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
CVE-2017-15085- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-300, CWE-200
- Updated
- 2026-11-02
CVE List No score
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
CVE-2017-15085- Weakness
- CWE-300
- Updated
- 2026-11-02
EUVDEUVD-2017-6554 No score
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
EUVD-2017-6554- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-44p5-fr45-3p7f
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017...
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
- Record
GHSA-44p5-fr45-3p7f- CVSS 3.0
- 5.9 Medium
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200, CWE-300
- Updated
- 2026-11-02
OSVRHSA-2017:3110
Red Hat Security Advisory: samba security update
- Record
RHSA-2017:3110- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ctdbRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
ctdb-testsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libsmbclientRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libsmbclient-develRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libwbclientRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
libwbclient-develRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
sambaRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-clientRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-client-libsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-commonRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-common-libsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-common-toolsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-dcRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-dc-libsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-debuginfoRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-develRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-krb5-printingRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-libsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-pidlRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-pythonRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-testRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-test-libsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-vfs-glusterfsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbindRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-clientsRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-krb5-locatorRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
samba-winbind-modulesRed Hat:storage:3.3:samba:el6 |
before 0:4.6.3-8.el6rhs | 0:4.6.3-8.el6rhs |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/bid/101554
bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15085
access.redhat.com/errata/RHSA-2017:3110
nvd.nist.gov/vuln/detail/CVE-2017-15085
Show 13 moreShow less
github.com/advisories/GHSA-44p5-fr45-3p7f
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_3110.json
cve.org/CVERecord?id=CVE-2017-15085