GS
Product
Gluster Storage
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 9Low 0
Watch
Add Gluster Storage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: 2.1 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 3.5 |
| CVE-2018-14653 | 8.8 | Oct 31 | The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message Affected: 3.0.0 through 3.1.2; 4.1.0 through 4.1.4 |
| CVE-2018-10928 | 8.8 | Sep 4 | A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume Affected: 3.0 |
| CVE-2011-3045 | 8.8 | Mar 22 | Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote… Affected: 2.0 |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 3.0; 3.5 |
| CVE-2018-1127 | 8.1 | Sep 11 | Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out Affected: before 3.4 |
| CVE-2018-1088 | 8.1 | Apr 18 | A privilege escalation flaw was found in gluster 3.x snapshot scheduler Affected: 3.0 through 3.13.2 |
| CVE-2018-10875 | 7.8 | Jul 13 | A flaw was found in ansible Affected: 3.0.0 |
| CVE-2015-1795 | 7.8 | Jun 27 | Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root Affected: 3.2 |
| CVE-2017-15087 | 7.5 | Nov 8 | It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6 Affected: 3.3 |
| CVE-2017-12150 | 7.4 | Jul 26 | It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled Affected: 3.0 |
| CVE-2017-15086 | 7.4 | Nov 8 | It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6 Affected: 3.3 |
| CVE-2017-12163 | 7.1 | Jul 26 | An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 Affected: 3.0 |
Showing 14