Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | glusterfs | 3.5.2-2+deb8u4 |
Vulnerabilities 11
-
High 8.8
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attrib…
-
High 8.8
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rp…
-
High 8.8
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point t…
-
High 8.8
A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this fla…
-
High 8.1
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use…
-
High 7.6
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server nod…
-
High 7.1
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 6.5
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attack…
-
Medium 6.5
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 5.5
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash wh…
-
Low 3.5
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via…