GS
Product
Gluster Storage
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 9Low 0
Watch
Add Gluster Storage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 2.1 |
| CVE-2017-7481 | 9.8 | Jul 19 | Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe Affected: 3.2 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 3.5 |
| CVE-2018-14653 | 8.8 | Oct 31 | The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message Affected: 3.0.0 through 3.1.2; 4.1.0 through 4.1.4 |
| CVE-2018-10928 | 8.8 | Sep 4 | A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume Affected: 3.0 |
| CVE-2011-3045 | 8.8 | Mar 22 | Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote… Affected: 2.0 |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 3.0; 3.5 |
| CVE-2018-1127 | 8.1 | Sep 11 | Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out Affected: before 3.4 |
| CVE-2018-1088 | 8.1 | Apr 18 | A privilege escalation flaw was found in gluster 3.x snapshot scheduler Affected: 3.0 through 3.13.2 |
| CVE-2018-10875 | 7.8 | Jul 13 | A flaw was found in ansible Affected: 3.0.0 |
| CVE-2015-1795 | 7.8 | Jun 27 | Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root Affected: 3.2 |
| CVE-2017-15087 | 7.5 | Nov 8 | It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6 Affected: 3.3 |
| CVE-2017-12150 | 7.4 | Jul 26 | It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled Affected: 3.0 |
| CVE-2017-15086 | 7.4 | Nov 8 | It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6 Affected: 3.3 |
| CVE-2017-12163 | 7.1 | Jul 26 | An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 Affected: 3.0 |
| CVE-2019-3831 | 6.7 | Mar 25 | A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8 Affected: 3.0 |
| CVE-2016-2125 | 6.5 | Oct 31 | It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication Affected: 3.0 |
| CVE-2018-14654 | 6.5 | Oct 31 | The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator Affected: through 4.1.4 |
| CVE-2018-14652 | 6.5 | Oct 31 | The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr… Affected: 3.0.0 through 3.1.2; 4.1.0 through 4.1.8 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 3.0; 3.5 |
| CVE-2018-1000808 | 5.9 | Oct 8 | Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that… Affected: 3.0 |
| CVE-2017-15085 | 5.9 | Nov 8 | It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6 Affected: 3.3 |
| CVE-2020-10763 | 5.5 | Nov 24 | An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information Affected: 3.0; 3.5 |
| CVE-2019-3880 | 5.4 | Apr 9 | A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API Affected: 3.0 |
| CVE-2015-5242 | – | Nov 25 | OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute… Affected: 3.1 |
Showing 25