In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-glusterUpgrade glusterfsUpgrade glusterfs-debuginfoUpgrade glusterfs-rdmaUpgrade glusterfs-cliUpgrade glusterfs-client-xlatorsUpgrade glusterfs-libsUpgrade glusterfs-api-develUpgrade glusterfs-apiUpgrade glusterfs-fuseUpgrade glusterfs-devel | Jun 8, 2023 | Feb 21, 2023 |
| Debian | — | Upgrade glusterfs | Jul 30, 2024 | Feb 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glusterfsUpgrade python3-gluster | May 9, 2023 | Feb 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libgfrpc0Upgrade glusterfs-cliUpgrade libgfapi0Upgrade glusterfsUpgrade glusterfs-thin-arbiterUpgrade libgfchangelog0Upgrade libglusterfs0Upgrade glusterfs-client-xlatorsUpgrade glusterfs-eventsUpgrade glusterfs-serverUpgrade glusterfs-fuseUpgrade libglusterd0Upgrade python3-glusterUpgrade libgfxdr0 | Jan 10, 2024 | Feb 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-glusterUpgrade glusterfs | Jul 10, 2023 | Feb 21, 2023 |
| Ubuntu | — | Upgrade glusterfs-client (Ubuntu Pro)Upgrade glusterfs-commonUpgrade glusterfs-common (Ubuntu Pro)Upgrade glusterfs-serverUpgrade glusterfs-server (Ubuntu Pro)Upgrade glusterfs-client | Apr 10, 2023 | Feb 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub