Redhat Gluster Storage vulnerabilities, page 2
25 vulnerabilities
Known vulnerabilities in Redhat Gluster Storage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-15085red hat, inc.gluster storage for rhel 6+1
EPSS score1.71%
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.CVE-2017-12150alpinesamba+8EPSS score13.17%
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.CVE-2017-12163alpinesamba+8EPSS score7.59%
An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.CVE-2019-3880alpinesamba+126EPSS score3.24%
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.CVE-2019-3831ovirtvdsm+31EPSS score1.03%
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands as root.