Red Hat glusterfs vulnerabilities

Newest CVEs

• CVE-2018-10930

  A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the…

  Red Hat · glusterfs

  Medium6.5
• CVE-2018-10929

  A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute…

  Red Hat · glusterfs

  High8.8
• CVE-2018-10928

  A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster…

  Red Hat · glusterfs

  High8.8
• CVE-2018-10927

  A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote…

  Red Hat · glusterfs

  High7.1
• CVE-2018-10926

  A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an…

  Red Hat · glusterfs

  High8.1
• CVE-2018-10924

  It was discovered that fsync(2) system call in glusterfs client code leaks memory. An authenticated attacker could use this flaw to launch a denial of service…

  Red Hat · glusterfs

  Medium5.3
• CVE-2018-10923

  It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. An authenticated attacker could use…

  Red Hat · glusterfs

  High7.6
• CVE-2018-10914

  It was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster brick process to crash which will result in a remote denial of…

  Red Hat · glusterfs

  Medium5.5
• CVE-2018-10913

  An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr request via glusterfs FUSE to determine the…

  Red Hat · glusterfs

  Low3.5
• CVE-2018-10907

  It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers…

  Red Hat · glusterfs

  High8.8