The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glusterfs-server | Aug 28, 2019 | Apr 18, 2018 |
| Debian | — | Upgrade glusterfs | Feb 19, 2019 | Apr 18, 2018 |
| Gentoo Linux | — | Upgrade sys-cluster/glusterfs. | Apr 3, 2019 | Apr 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glusterfsUpgrade glusterfs-apiUpgrade glusterfs-rdmaUpgrade glusterfs-client-xlatorsUpgrade glusterfs-libsUpgrade glusterfs-fuse | Jul 3, 2018 | Apr 18, 2018 |
| Redhat_linux | — | Upgrade glusterfs-server | Apr 19, 2018 | Apr 18, 2018 |
| Suse | — | Upgrade libgfxdr0Upgrade libgfapi0Upgrade glusterfs-develUpgrade libglusterfs0Upgrade libgfchangelog0Upgrade libgfrpc0Upgrade glusterfsUpgrade python-glusterUpgrade libgfdb0 | Jan 21, 2020 | Apr 18, 2018 |
| Ubuntu | — | Upgrade glusterfs-client (Ubuntu Pro)Upgrade glusterfs-common (Ubuntu Pro)Upgrade glusterfs-server (Ubuntu Pro) | Mar 22, 2023 | Apr 18, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub