Red Hat glusterfs
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-10930 | n/a | A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a desti | MEDIUM 6.5 | 2.0 % | ||
| CVE-2018-10929 | n/a | A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw to create arbitrary | HIGH 8.8 | 3.4 % | ||
| CVE-2018-10928 | n/a | A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside | HIGH 8.8 | 2.7 % | ||
| CVE-2018-10927 | n/a | A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information | HIGH 8.1 | 2.6 % | ||
| CVE-2018-10926 | n/a | A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write f | HIGH 8.8 | 2.6 % | ||
| CVE-2018-10924 | n/a | It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a | MEDIUM 6.5 | 1.9 % | ||
| CVE-2018-10923 | n/a | It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated a | HIGH 8.1 | 1.6 % | ||
| CVE-2018-10914 | n/a | It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a | MEDIUM 6.5 | 2.3 % | ||
| CVE-2018-10913 | n/a | An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to de | MEDIUM 6.5 | 2.0 % | ||
| CVE-2018-10911 | n/a | A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. An attacker could use this fla | HIGH 7.5 | 2.9 % | ||
| CVE-2018-10907 | n/a | It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating f | HIGH 8.8 | 3.3 % | ||
| CVE-2018-10904 | n/a | It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by | HIGH 8.8 | 3.0 % | ||
| CVE-2018-10841 | all | glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with | HIGH 8.8 | 1.2 % |