The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glusterfs-server | Aug 28, 2019 | Apr 18, 2018 |
| Debian | — | Upgrade glusterfs | Feb 19, 2019 | Apr 18, 2018 |
| Gentoo Linux | — | Upgrade sys-cluster/glusterfs. | Apr 3, 2019 | Apr 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glusterfs-libsUpgrade glusterfs-client-xlatorsUpgrade glusterfs-rdmaUpgrade glusterfs-apiUpgrade glusterfs-fuseUpgrade glusterfs | Jul 3, 2018 | Apr 18, 2018 |
| Redhat_linux | — | Upgrade glusterfs-server | Apr 19, 2018 | Apr 18, 2018 |
| Suse | — | Upgrade libglusterfs0Upgrade libgfapi0Upgrade glusterfs-develUpgrade libgfxdr0Upgrade libgfchangelog0Upgrade python-glusterUpgrade libgfdb0Upgrade glusterfsUpgrade libgfrpc0 | Jan 21, 2020 | Apr 18, 2018 |
| Ubuntu | — | Upgrade glusterfs-client (Ubuntu Pro)Upgrade glusterfs-common (Ubuntu Pro)Upgrade glusterfs-server (Ubuntu Pro) | Mar 22, 2023 | Apr 18, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub