{"id":"CVE-2014-3619","aliases":["DEBIAN-CVE-2014-3619","EUVD-2014-3582","GHSA-7hxx-57vq-gp63","MGASA-2015-0145","RHBA-2015:0038","RHBA-2015:0040","UBUNTU-CVE-2014-3619","USN-4770-1"],"status":"published","title":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a...","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02719,"percentile":0.86113,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2015-03-27T14:00:00Z","modified":"2026-10-23T15:47:39Z","fixes":[{"ecosystem":"Debian:12","package":"glusterfs","fixed_in":["3.5.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glusterfs","fixed_in":["3.5.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glusterfs","fixed_in":["3.5.2-2"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"glusterfs","fixed_in":["3.4.1-1.2.mga4"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-api","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-api-devel","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-debuginfo","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-devel","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-fuse","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-libs","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-rdma","fixed_in":["0:3.6.0.42-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:nagios:el6","package":"gluster-nagios-common","fixed_in":["0:0.1.4-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"gluster-nagios-addons","fixed_in":["0:0.1.14-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"gluster-nagios-addons-debuginfo","fixed_in":["0:0.1.14-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"gluster-nagios-common","fixed_in":["0:0.1.4-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-api","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-api-devel","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-cli","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-debuginfo","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-devel","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-fuse","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-geo-replication","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-libs","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-rdma","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-server","fixed_in":["0:3.6.0.42-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"gstatus","fixed_in":["0:0.62-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"gstatus-debuginfo","fixed_in":["0:0.62-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"libsmbclient","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"libsmbclient-devel","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift","fixed_in":["0:1.13.1-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-account","fixed_in":["0:1.13.1-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-container","fixed_in":["0:1.13.1-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-doc","fixed_in":["0:1.13.1-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-object","fixed_in":["0:1.13.1-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-plugin-swift3","fixed_in":["0:1.7-3.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-proxy","fixed_in":["0:1.13.1-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"python-paste-deploy","fixed_in":["0:1.5.0-10.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"python-swiftclient","fixed_in":["0:2.1.0-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"python-swiftclient-doc","fixed_in":["0:2.1.0-2.el6ost"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"redhat-storage-server","fixed_in":["0:3.0.3.4-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-client","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-common","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-debuginfo","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-doc","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-domainjoin-gui","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-glusterfs","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-swat","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind-clients","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind-devel","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind-krb5-locator","fixed_in":["0:3.6.509-169.4.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"swiftonfile","fixed_in":["0:1.13.1-2.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-api","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-cli","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-debug-plugin","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-debuginfo","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-gluster","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-hook-faqemu","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-hook-openstacknet","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-hook-qemucmdline","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-jsonrpc","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-python","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-python-zombiereaper","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-reg","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-tests","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-xmlrpc","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-yajsonrpc","fixed_in":["0:4.14.7.3-1.el6rhs"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","fixed_in":["0:3.6.0.42-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-api","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-api-devel","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-debuginfo","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-devel","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-fuse","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-libs","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-rdma","fixed_in":["0:3.6.0.42-1.el7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","fixed_in":["3.4.2-1ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-1.2.mga4"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:2:client:el5","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:nagios:el6","package":"gluster-nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"gluster-nagios-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.14-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"gluster-nagios-addons-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.14-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"gluster-nagios-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-geo-replication","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"glusterfs-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"gstatus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.62-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"gstatus-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.62-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-account","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-object","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-plugin-swift3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-3.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"openstack-swift-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"python-paste-deploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-10.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"python-swiftclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"python-swiftclient-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-2.el6ost"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"redhat-storage-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.3.4-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.509-169.4.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"swiftonfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.1-2.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-debug-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-gluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-hook-faqemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-hook-openstacknet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-hook-qemucmdline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-jsonrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-python-zombiereaper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-reg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:server:el6","package":"vdsm-yajsonrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.7.3-1.el6rhs"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:storage:3:client:el6","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-api-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_common:7::el7","package":"glusterfs-rdma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.0.42-1.el7"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1ubuntu1+esm1"}]}],"versions":["3.2.7-3ubuntu2","3.4.1-1ubuntu1","3.4.1-2ubuntu1","3.4.2-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.6-1ubuntu1+esm1"}]}],"versions":["3.7.3-1ubuntu1","3.7.3-1ubuntu2","3.7.6-1ubuntu1"],"bundled":22},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1ubuntu1+esm1"}]}],"versions":["3.11.2-1","3.12.1-1","3.12.2-1","3.12.2-2","3.12.3-1","3.13.0-1","3.13.2-1","3.13.2-1build1","3.13.2-1ubuntu1"],"bundled":22}],"products":[{"vendor":"gluster","product":"glusterfs"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"http://review.gluster.org/#/c/8662/4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1138145","tags":["x_refsource_MISC","x_transferred","report"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:211","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2015-0145.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00056.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3619","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2015:0038","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2015:0040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3619","tags":["report"]},{"url":"https://github.com/advisories/GHSA-7hxx-57vq-gp63"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3619","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0145.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15473","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14049","tags":["report"]},{"url":"https://access.redhat.com/site/documentation/en-US/Red_Hat_Storage/3/html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=991300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1050823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1061585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1107606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1122978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1127658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1130158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1138547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1144428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1146830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1146906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1147427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1158844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1158883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1158898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1161531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1162468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1163703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1164721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1165904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1167613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1168873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1169764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1180463","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0038.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3619","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1162831","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_0040.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3619","tags":["report"]},{"url":"http://review.gluster.org/#/c/8848/","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1136712","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4770-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10841","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10904","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14652","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14653","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14659","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14660","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14661","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-3619","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2015-03-27T14:00:00Z","modified":"2024-08-06T10:50:17.568Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3582","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2015-03-27T14:00:00Z","modified":"2024-08-06T10:50:17Z","updated_at":"2026-11-03T01:57:10.446744Z"}],"ghsa":[{"id":"GHSA-7hxx-57vq-gp63","title":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a...","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2022-05-14T02:09:28Z","modified":"2023-02-10T05:06:49Z","updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2014-3619","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2015-03-27T14:59:01.493Z","modified":"2026-06-17T00:08:37.89Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-3619","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2015-03-27T14:59:01Z","modified":"2026-04-16T06:23:48.952408491Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3619","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2015-03-27T14:59:01.493Z","modified":"2026-10-23T15:47:39.691024394Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2015-0145","title":"Updated glusterfs packages fix security vulnerabilities","description":"Updated glusterfs packages fix security vulnerability:\n\nglusterfs was vulnerable to a fragment header infinite loop denial of service\nattack (CVE-2014-3619).\n\nAlso, the glusterfsd SysV init script was failing to properly start the\nservice.  This was fixed by replacing it with systemd unit files for the\nservice that work properly (mga#14049).\n","status":"published","published":"2015-04-15T09:01:28Z","modified":"2026-04-16T06:26:26.076658804Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"RHBA-2015:0038","title":"Red Hat Bug Fix Advisory: Red Hat Storage 3.0 enhancement and bug fix update #3","status":"published","published":"2024-09-13T09:18:32Z","modified":"2026-06-29T10:08:06Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"RHBA-2015:0040","title":"Red Hat Bug Fix Advisory: glusterfs enhancement update","status":"published","published":"2024-09-13T09:18:48Z","modified":"2026-06-29T10:08:06Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2014-3619","description":"The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a \"00000000\" fragment header.","status":"published","published":"2015-03-27T14:59:00Z","modified":"2026-02-04T02:32:27.052652Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-4770-1","title":"glusterfs vulnerabilities","description":"It was discovered that GlusterFS incorrectly handled network requests. An\nattacker could possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 14.04 ESM. (CVE-2014-3619)\n\nIt was discovered that GlusterFS incorrectly handled user permissions. An\nauthenticated attacker could possibly use this to add himself to a trusted\nstorage pool and perform privileged operations on volumes. This issue only\naffected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-10841)\n\nIt was discovered that GlusterFS incorrectly handled mounting gluster\nvolumes. An attacker could possibly use this issue to also mount shared\ngluster volumes and escalate privileges through malicious cronjobs. This\nissue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-1088)\n\nIt was discovered that GlusterFS incorrectly handled file paths. An\nattacker could possibly use this issue to create arbitrary files and\nexecute arbitrary code. (CVE-2018-10904)\n\nIt was discovered that GlusterFS incorrectly handled mounting volumes. An\nattacker could possibly use this issue to cause a denial of service or run\narbitrary code. (CVE-2018-10907)\n\nIt was discovered that GlusterFS incorrectly handled negative key length\nvalues. An attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2018-10911)\n\nIt was discovered that GlusterFS incorrectly handled FUSE requests. An\nattacker could use this issue to obtain sensitive information.\n(CVE-2018-10913, CVE-2018-10914)\n\nIt was discovered that GlusterFS incorrectly handled the file creation\nprocess. An authenticated attacker could possibly use this issue to create\narbitrary files and obtain sensitive information. (CVE-2018-10923)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. An\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-10924)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. An\nattacker could possibly use this issue to write files to an arbitrary\nlocation and execute arbitrary code. (CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930)\n\nIt was discovered that the fix for CVE-2018-10926, CVE-2018-10927,\nCVE-2018-10928, CVE-2018-10929, CVE-2018-10930 was incomplete. A remote\nauthenticated attacker could possibly use this issue to execute arbitrary\ncode or cause a denial of service. (CVE-2018-14651)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to cause a\ndenial of service. (CVE-2018-14652)\n\nIt was discovered that GlusterFS incorrectly handled RPC requests. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice or other unspecified impact. (CVE-2018-14653)\n\nIt was discovered that GlusterFS incorrectly handled mount volumes\noperation. A remote attacker could possibly use this issue to create\narbitrary files. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14654)\n\nIt was discovered that GlusterFS incorrectly handled certain files. A\nremote authenticated attacker could possibly use this issue to create\narbitrary files. (CVE-2018-14659)\n\nIt was discovered that GlusterFS incorrectly handled certain inputs. A\nremote authenticated attacker could possibly use this is issue to cause a\ndenial of service. This issue only affected Ubuntu 18.04 ESM. (CVE-2018-14660)\n\nIt was discovered that GlusterFS incorrectly handled strings. A remote\nauthenticated attacker could possibly use this issue to cause a denial of\nservice. (CVE-2018-14661)\n","status":"published","published":"2021-03-15T20:13:19Z","modified":"2026-06-29T13:48:13.075405496Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}