{"schemaVersion":3,"id":"RHSA-2018:3432","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: glusterfs security and bug fix update","dates":{"published":"2024-09-22T16:32:52.000Z","modified":"2026-07-01T10:05:00.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":6.8,"severity":"medium","vector":"CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":2.3,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"glusterfs","name":"glusterfs","label":"glusterfs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-api","name":"glusterfs-api","label":"glusterfs-api","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-api","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-api-devel","name":"glusterfs-api-devel","label":"glusterfs-api-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-api-devel","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-cli","name":"glusterfs-cli","label":"glusterfs-cli","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-cli","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-client-xlators","name":"glusterfs-client-xlators","label":"glusterfs-client-xlators","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-client-xlators","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-debuginfo","name":"glusterfs-debuginfo","label":"glusterfs-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-debuginfo","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-devel","name":"glusterfs-devel","label":"glusterfs-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-devel","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-events","name":"glusterfs-events","label":"glusterfs-events","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-events","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-fuse","name":"glusterfs-fuse","label":"glusterfs-fuse","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-fuse","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-ganesha","name":"glusterfs-ganesha","label":"glusterfs-ganesha","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-ganesha","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-geo-replication","name":"glusterfs-geo-replication","label":"glusterfs-geo-replication","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-geo-replication","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-libs","name":"glusterfs-libs","label":"glusterfs-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-libs","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-rdma","name":"glusterfs-rdma","label":"glusterfs-rdma","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-rdma","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-resource-agents","name":"glusterfs-resource-agents","label":"glusterfs-resource-agents","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-resource-agents","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs","eol":null,"hubHref":null},{"vendor":"redhat","product":"glusterfs-server","name":"glusterfs-server","label":"glusterfs-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glusterfs-server","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs","eol":null,"hubHref":null},{"vendor":"redhat","product":"python2-gluster","name":"python2-gluster","label":"python2-gluster","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/python2-gluster","purlType":"rpm","versions":[{"text":"< 0:3.12.2-25.el7rhgs","noFixRecorded":false,"fixedIn":null},{"text":"< 0:3.12.2-25.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.12.2-25.el7rhgs | < 0:3.12.2-25.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"redhat-storage-server","name":"redhat-storage-server","label":"redhat-storage-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/redhat-storage-server","purlType":"rpm","versions":[{"text":"< 0:3.4.1.0-1.el7rhgs","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.4.1.0-1.el7rhgs","eol":null,"hubHref":null}],"affectedCount":17,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:3432","label":"access.redhat.com/errata/RHSA-2018:3432","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610743","label":"bugzilla.redhat.com/show_bug.cgi?id=1610743","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618221","label":"bugzilla.redhat.com/show_bug.cgi?id=1618221","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619627","label":"bugzilla.redhat.com/show_bug.cgi?id=1619627","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622649","label":"bugzilla.redhat.com/show_bug.cgi?id=1622649","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623749","label":"bugzilla.redhat.com/show_bug.cgi?id=1623749","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623874","label":"bugzilla.redhat.com/show_bug.cgi?id=1623874","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624444","label":"bugzilla.redhat.com/show_bug.cgi?id=1624444","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625622","label":"bugzilla.redhat.com/show_bug.cgi?id=1625622","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1626780","label":"bugzilla.redhat.com/show_bug.cgi?id=1626780","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627098","label":"bugzilla.redhat.com/show_bug.cgi?id=1627098","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627617","label":"bugzilla.redhat.com/show_bug.cgi?id=1627617","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627639","label":"bugzilla.redhat.com/show_bug.cgi?id=1627639","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630688","label":"bugzilla.redhat.com/show_bug.cgi?id=1630688","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631329","label":"bugzilla.redhat.com/show_bug.cgi?id=1631329","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631372","label":"bugzilla.redhat.com/show_bug.cgi?id=1631372","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631576","label":"bugzilla.redhat.com/show_bug.cgi?id=1631576","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632557","label":"bugzilla.redhat.com/show_bug.cgi?id=1632557","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632974","label":"bugzilla.redhat.com/show_bug.cgi?id=1632974","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633431","label":"bugzilla.redhat.com/show_bug.cgi?id=1633431","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635926","label":"bugzilla.redhat.com/show_bug.cgi?id=1635926","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635929","label":"bugzilla.redhat.com/show_bug.cgi?id=1635929","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636880","label":"bugzilla.redhat.com/show_bug.cgi?id=1636880","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636902","label":"bugzilla.redhat.com/show_bug.cgi?id=1636902","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640135","label":"bugzilla.redhat.com/show_bug.cgi?id=1640135","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641489","label":"bugzilla.redhat.com/show_bug.cgi?id=1641489","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641586","label":"bugzilla.redhat.com/show_bug.cgi?id=1641586","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643355","label":"bugzilla.redhat.com/show_bug.cgi?id=1643355","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3432.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3432.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14651","label":"access.redhat.com/security/cve/CVE-2018-14651","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14651","label":"www.cve.org/CVERecord?id=CVE-2018-14651","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14651","label":"nvd.nist.gov/vuln/detail/CVE-2018-14651","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14652","label":"access.redhat.com/security/cve/CVE-2018-14652","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14652","label":"www.cve.org/CVERecord?id=CVE-2018-14652","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14652","label":"nvd.nist.gov/vuln/detail/CVE-2018-14652","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14653","label":"access.redhat.com/security/cve/CVE-2018-14653","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14653","label":"www.cve.org/CVERecord?id=CVE-2018-14653","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14653","label":"nvd.nist.gov/vuln/detail/CVE-2018-14653","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14654","label":"access.redhat.com/security/cve/CVE-2018-14654","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14654","label":"www.cve.org/CVERecord?id=CVE-2018-14654","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14654","label":"nvd.nist.gov/vuln/detail/CVE-2018-14654","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14659","label":"access.redhat.com/security/cve/CVE-2018-14659","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14659","label":"www.cve.org/CVERecord?id=CVE-2018-14659","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14659","label":"nvd.nist.gov/vuln/detail/CVE-2018-14659","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14660","label":"access.redhat.com/security/cve/CVE-2018-14660","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14660","label":"www.cve.org/CVERecord?id=CVE-2018-14660","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14660","label":"nvd.nist.gov/vuln/detail/CVE-2018-14660","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14661","label":"access.redhat.com/security/cve/CVE-2018-14661","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14661","label":"www.cve.org/CVERecord?id=CVE-2018-14661","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14661","label":"nvd.nist.gov/vuln/detail/CVE-2018-14661","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2018-14651","CVE-2018-14652","CVE-2018-14653","CVE-2018-14654","CVE-2018-14659","CVE-2018-14660","CVE-2018-14661"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-22T16:32:52.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-01T10:05:00.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":27,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T05:35:46.360Z","stale":false,"partial":false}}