Redhat Gluster Storage vulnerabilities

• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• heketi project heketi, redhat enterprise linux, gluster storage +1 more +3 more Heketi logs sensitive information CVE-2020-10763 Fix available 5.5 MediumNovember 24, 2020
• samba, debian linux, fedoraproject fedora +3 more +5 more A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry... CVE-2019-3880 Fix available 4.2 MediumApril 8, 2019
• [unknown] vdsm, redhat gluster storage +1 more A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8.... CVE-2019-3831 Fix available 6.4 MediumMarch 25, 2019
• debian linux, redhat enterprise linux server, enterprise linux virtualization +4 more +6 more The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index'... CVE-2018-14654 Fix available 5.4 MediumOctober 31, 2018
• debian linux, redhat enterprise linux server, enterprise linux virtualization +2 more +4 more The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer... CVE-2018-14653 Fix available 6.5 MediumOctober 31, 2018
• debian linux, redhat enterprise linux server, enterprise linux virtualization +3 more +5 more The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the... CVE-2018-14652 Fix available 6.5 MediumOctober 31, 2018
• pyopenssl project pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 more Pyopenssl Incorrect Memory Management CVE-2018-1000808 Fix available 5.9 MediumOctober 8, 2018
• red hat gluster storage Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens... CVE-2018-1127 Fix available 4.2 MediumSeptember 11, 2018
• gluster glusterfs, debian linux, opensuse leap +4 more +6 more A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink... CVE-2018-10928 Fix available 8.8 HighSeptember 4, 2018
• [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 more Ansible Arbitrary Code Execution CVE-2018-10875 Fix available 7.8 HighJuly 13, 2018
• redhat gluster storage, debian linux, opensuse leap +4 more +6 more A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client... CVE-2018-1088 Public exploitFix available 8.1 HighApril 18, 2018
• redhat gluster storage, red hat, inc. gluster storage for rhel 6 +1 more It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017... CVE-2017-15087 7.5 HighNovember 8, 2017
• redhat gluster storage, red hat, inc. gluster storage for rhel 6 +1 more It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017... CVE-2017-15086 7.4 HighNovember 8, 2017
• redhat gluster storage, red hat, inc. gluster storage for rhel 6 +1 more It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017... CVE-2017-15085 5.9 MediumNovember 8, 2017
• samba, debian linux, redhat enterprise linux desktop +3 more +5 more An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4... CVE-2017-12163 Fix available 4.1 MediumSeptember 20, 2017
• samba, debian linux, redhat enterprise linux desktop +3 more +5 more It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not... CVE-2017-12150 Fix available EPSS 13.1% 7.4 HighSeptember 20, 2017
• redhat gluster storage Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute... CVE-2015-1795 Fix available 7.8 HighJune 27, 2017
• [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 more Ansible fails to properly mark lookup-plugin results as unsafe CVE-2017-7481 Fix available 5.3 MediumJune 10, 2017
• [unknown] samba, redhat enterprise linux desktop, enterprise linux server +5 more +7 more It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets... CVE-2016-2125 Fix available 6.4 MediumDecember 19, 2016
• redhat gluster storage management console, gluster storage server, storage native client +2 more The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage... CVE-2014-8177 6.5 MediumJune 7, 2016
• redhat gluster storage OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python... CVE-2015-5242 Fix available 6.0 MediumNovember 25, 2015
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... CVE-2014-7169 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... CVE-2014-6271 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalSeptember 24, 2014
• openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle... CVE-2014-0160 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighApril 7, 2014
• mozilla firefox, thunderbird, thunderbird esr +13 more +15 more Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and... CVE-2013-1690 In KEVPublic exploit EPSS 69.0% 8.8 HighJune 26, 2013
• mozilla firefox, thunderbird, thunderbird esr +15 more +17 more Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and... CVE-2013-1675 In KEV 6.5 MediumMay 16, 2013
• openstack swift, redhat storage, fedoraproject fedora +4 more +6 more OpenStack Object Storage (swift) Code Injection vulnerability CVE-2012-4406 Fix available 9.8 CriticalOctober 22, 2012
• php, apple mac os x, debian linux +14 more +16 more sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ... CVE-2012-1823 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighMay 9, 2012
• apache openoffice, librdf raptor, libreoffice +10 more +12 more Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice... CVE-2012-0037 Fix available EPSS 13.5% 6.5 MediumMarch 22, 2012
• google chrome, libpng, debian linux +10 more +12 more Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01,... CVE-2011-3045 Fix available 6.8 MediumMarch 22, 2012