Glusterfs (Red Hat) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-09-04. Vendor: Red Hat.
CVEs of Glusterfs
- CVE-2018-10930 - CVSS 6.5 (medium), 2018-09-04: A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the…
- CVE-2018-10929 - CVSS 8.8 (high), 2018-09-04: A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute…
- CVE-2018-10927 - CVSS 8.1 (high), 2018-09-04: A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute…
- CVE-2018-10926 - CVSS 8.8 (high), 2018-09-04: A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an…
- CVE-2018-10924 - CVSS 6.5 (medium), 2018-09-04: It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service…
- CVE-2018-10928 - CVSS 8.8 (high), 2018-09-04: A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster…
- CVE-2018-10914 - CVSS 6.5 (medium), 2018-09-04: It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of…
- CVE-2018-10913 - CVSS 6.5 (medium), 2018-09-04: An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the…
- CVE-2018-10911 - CVSS 7.5 (high), 2018-09-04: A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacker could use this flaw to read memory…
- CVE-2018-10923 - CVSS 8.1 (high), 2018-09-04: It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use…
- CVE-2018-10907 - CVSS 8.8 (high), 2018-09-04: It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers…
- CVE-2018-10904 - CVSS 8.8 (high), 2018-09-04: It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the…
- CVE-2018-10841 - CVSS 8.8 (high), 2018-06-20: glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host…
