GS
Product
Gluster Storage
On CISA KEVExploited in the wild
25
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 9Low 0
Watch
Add Gluster Storage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3831 | 6.7 | Mar 25 | A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8 Affected: 3.0 |
| CVE-2016-2125 | 6.5 | Oct 31 | It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication Affected: 3.0 |
| CVE-2018-14654 | 6.5 | Oct 31 | The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator Affected: through 4.1.4 |
| CVE-2018-14652 | 6.5 | Oct 31 | The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr… Affected: 3.0.0 through 3.1.2; 4.1.0 through 4.1.8 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 3.0; 3.5 |
| CVE-2018-1000808 | 5.9 | Oct 8 | Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that… Affected: 3.0 |
| CVE-2017-15085 | 5.9 | Nov 8 | It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6 Affected: 3.3 |
| CVE-2020-10763 | 5.5 | Nov 24 | An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information Affected: 3.0; 3.5 |
| CVE-2019-3880 | 5.4 | Apr 9 | A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API Affected: 3.0 |
Showing 9