Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | glusterfs | 3.8.8-1+deb9u1 |
Vulnerabilities 19
-
High 8.8
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attrib…
-
High 8.8
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rp…
-
High 8.8
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point t…
-
High 8.8
A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this fla…
-
High 8.1
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use…
-
High 7.6
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server nod…
-
High 7.1
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 6.6
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could …
-
Medium 6.5
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attack…
-
Medium 6.5
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 6.5
The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' tran…
-
Medium 6.5
The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_…
-
Medium 6.5
The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF…
-
Medium 6.5
A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY …
-
Medium 6.5
It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red…
-
Medium 5.5
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash wh…
-
Medium 5.4
The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attac…
-
Low 3.5
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via…
-
Unscored —CVE-2018-1088 Public exploit
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster vo…