24 results · Feed
-
High 7.5
In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.
-
High 7.5
In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.
-
Medium 6.5
A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY …
-
High 8.8
It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was in…
-
Medium 6.5
It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped with Red…
-
Medium 6.5
The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_…
-
Medium 6.5
The Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service attack via use of the 'GF…
-
Medium 6.5
The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' tran…
-
Medium 5.4
The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attac…
-
High 8.8
A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 6.5
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this fla…
-
Medium 5.3
It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use …
-
High 8.1
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use…
-
High 8.8
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point t…
-
High 7.1
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this fla…
-
Low 3.5
An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via…
-
Medium 6.5
A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attack…
-
High 7.6
It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server nod…
-
Medium 5.5
It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash wh…
-
High 8.8
It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rp…
-
High 8.8
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attrib…
-
Medium 6.6
glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could …
-
Unscored —CVE-2018-1088 Public exploit
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster vo…
-
Unscored —
The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infini…