Red Hat Gluster Storage Server For On-Premise vulnerabilities

7 CVEs affecting Red Hat Gluster Storage Server For On-Premise, 5 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-7169, published 2014-09-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-24. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 100% chance of exploitation in the next 30 days. GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment,…
CVE-2012-1823: PHP-CGI Query String Parameter Vulnerability, published 2012-05-11. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 100% chance of exploitation in the next 30 days. sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which…
CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-25. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 99.9% chance of exploitation in the next 30 days. GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or…
CVE-2013-1690: Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability, published 2013-06-26. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 69% chance of exploitation in the next 30 days. Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with…
CVE-2013-1675: Mozilla Firefox Information Disclosure Vulnerability, published 2013-05-16. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 6.7% chance of exploitation in the next 30 days. Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the…
CVE-2012-0037, published 2012-06-17. Medium severity, CVSS 6.5. EPSS: 13.7% chance of exploitation in the next 30 days. Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted remote attackers to read…
CVE-2012-4406, published 2012-10-22. Critical severity, CVSS 9.8. EPSS: 6.6% chance of exploitation in the next 30 days. OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute…