Red Hat Gluster Storage vulnerabilities

25 CVEs affecting Red Hat Gluster Storage, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44142, published 2022-02-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0160: OpenSSL Information Disclosure Vulnerability, published 2014-04-07. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2022-05-04. EPSS: 100% chance of exploitation in the next 30 days. The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process…
CVE-2021-44142, published 2022-02-21. High severity, CVSS 8.8. EPSS: 73.6% chance of exploitation in the next 30 days. The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba…
CVE-2017-12150, published 2018-07-26. High severity, CVSS 7.4. EPSS: 13.2% chance of exploitation in the next 30 days. It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a…
CVE-2016-2125, published 2018-10-31. Medium severity, CVSS 6.5. EPSS: 9.2% chance of exploitation in the next 30 days. It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could…
CVE-2017-12163, published 2018-07-26. High severity, CVSS 7.1. EPSS: 7.6% chance of exploitation in the next 30 days. An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server…
CVE-2018-1088, published 2018-04-18. High severity, CVSS 8.1. EPSS: 5.5% chance of exploitation in the next 30 days. A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by…
CVE-2017-7481, published 2018-07-19. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be…
CVE-2011-3045, published 2012-03-22. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a…
CVE-2019-3880, published 2019-04-09. Medium severity, CVSS 5.4. EPSS: 3.2% chance of exploitation in the next 30 days. A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they…
CVE-2018-14653, published 2018-10-31. High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days. The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated…

Latest

CVE-2020-25717, published 2022-02-18. High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days. A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
CVE-2016-2124, published 2022-02-18. Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days. A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
CVE-2020-10763, published 2020-11-24. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive…
CVE-2019-3831, published 2019-03-25. Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemd_run function exposed to the vdsm system user could be abused to execute arbitrary commands…
CVE-2018-14654, published 2018-10-31. Medium severity, CVSS 6.5. EPSS: 2.6% chance of exploitation in the next 30 days. The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the…
CVE-2018-14652, published 2018-10-31. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr'…