Gluster vulnerabilities

Products

• Glusterfs 23

Newest

• gluster glusterfs In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based... CVE-2023-26253 Fix available 7.5 HighFebruary 21, 2023
• gluster glusterfs In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk... CVE-2022-48340 Fix available 7.5 HighFebruary 21, 2023
• [unknown] glusterfs, debian linux, redhat enterprise linux server +2 more +4 more A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated... CVE-2018-14660 Fix available 6.5 MediumNovember 1, 2018
• [unknown] glusterfs, debian linux, redhat enterprise linux +2 more It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and... CVE-2018-14651 Fix available 8.8 HighOctober 31, 2018
• gluster glusterfs, debian linux, redhat enterprise linux server +3 more +5 more It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8... CVE-2018-14661 Fix available 6.5 MediumOctober 31, 2018
• gluster glusterfs, debian linux, opensuse leap +4 more +6 more A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated... CVE-2018-10930 Fix available 6.5 MediumSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated... CVE-2018-10929 Fix available 8.8 HighSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +4 more +6 more A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink... CVE-2018-10928 Fix available 8.8 HighSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated... CVE-2018-10927 Fix available 7.1 HighSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +3 more +5 more A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An... CVE-2018-10926 Fix available 8.1 HighSeptember 4, 2018
• gluster glusterfs It was discovered that fsync(2) system call in glusterfs client code leaks memory. An... CVE-2018-10924 Fix available 5.3 MediumSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on... CVE-2018-10923 Fix available 7.6 HighSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster... CVE-2018-10914 Fix available 5.5 MediumSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more An information disclosure vulnerability was discovered in glusterfs server. An attacker could... CVE-2018-10913 Fix available 3.5 LowSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +5 more +7 more A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key... CVE-2018-10911 Fix available 6.5 MediumSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to... CVE-2018-10907 Fix available 8.8 HighSeptember 4, 2018
• gluster glusterfs, debian linux, opensuse leap +2 more +4 more It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats... CVE-2018-10904 Fix available 8.8 HighSeptember 4, 2018
• gluster glusterfs, debian linux +1 more glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster... CVE-2018-10841 Fix available 6.6 MediumJune 20, 2018
• gluster glusterfs glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option... CVE-2018-1112 Fix available 8.0 HighApril 25, 2018
• gluster glusterfs A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in... CVE-2017-15096 Fix available 3.3 LowOctober 26, 2017
• gluster glusterfs, opensuse +1 more The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a... CVE-2014-3619 Fix available 5.0 MediumMarch 27, 2015
• gluster glusterfs, redhat storage management console, storage native client +1 more +3 more The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server... CVE-2012-5635 Fix available 2.1 LowApril 9, 2013
• gluster glusterfs GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary... CVE-2012-4417 Fix available 3.6 LowNovember 18, 2012