GL
Vendor
Gluster
23
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-26253 | GL Glusterfs Gluster | 7.5 | Feb 21 | In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read |
| CVE-2022-48340 | GL Glusterfs Gluster | 7.5 | Feb 21 | In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free |
| CVE-2018-14660 | GL Glusterfs Gluster | 6.5 | Nov 1 | A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY xattr |
| CVE-2018-14651 | GL Glusterfs Gluster | 8.8 | Oct 31 | It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete |
| CVE-2018-14661 | GL Glusterfs Gluster | 6.5 | Oct 31 | It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red Hat Gluster Storage, was vulnerable to a format string… |
| CVE-2018-10930 | GL Glusterfs Gluster | 6.5 | Sep 4 | A flaw was found in RPC request using gfs3_rename_req in glusterfs server |
| CVE-2018-10929 | GL Glusterfs Gluster | 8.8 | Sep 4 | A flaw was found in RPC request using gfs2_create_req in glusterfs server |
| CVE-2018-10928 | GL Glusterfs Gluster | 8.8 | Sep 4 | A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume |
| CVE-2018-10927 | GL Glusterfs Gluster | 8.1 | Sep 4 | A flaw was found in RPC request using gfs3_lookup_req in glusterfs server |
| CVE-2018-10926 | GL Glusterfs Gluster | 8.8 | Sep 4 | A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server |
| CVE-2018-10924 | GL Glusterfs Gluster | 6.5 | Sep 4 | It was discovered that fsync(2) system call in glusterfs client code leaks memory |
| CVE-2018-10923 | GL Glusterfs Gluster | 8.1 | Sep 4 | It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node |
| CVE-2018-10914 | GL Glusterfs Gluster | 6.5 | Sep 4 | It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of service |
| CVE-2018-10913 | GL Glusterfs Gluster | 6.5 | Sep 4 | An information disclosure vulnerability was discovered in glusterfs server |
| CVE-2018-10911 | GL Glusterfs Gluster | 7.5 | Sep 4 | A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values |
| CVE-2018-10907 | GL Glusterfs Gluster | 8.8 | Sep 4 | It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)' |
| CVE-2018-10904 | GL Glusterfs Gluster | 8.8 | Sep 4 | It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator |
| CVE-2018-10841 | GL Glusterfs Gluster | 8.8 | Jun 20 | glusterfs is vulnerable to privilege escalation on gluster server nodes |
| CVE-2018-1112 | GL Glusterfs Gluster | 8.8 | Apr 25 | glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount… |
| CVE-2017-15096 | GL Glusterfs Gluster | 3.3 | Oct 26 | A flaw was found in GlusterFS in versions prior to 3.10 |
| CVE-2014-3619 | GL Glusterfs Gluster | – | Mar 27 | The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header |
| CVE-2012-5635 | GL Glusterfs Gluster | – | Apr 9 | The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on… |
| CVE-2012-4417 | GL Glusterfs Gluster | – | Nov 18 | GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names |