CVE Feed

    Dashboard / CVE / CVE-2017-15096

    CVE-2017-15096

    A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service.

    Published:Oct 17, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 26, 2017
    EPSS Score:0.00056
    CVSS Score:3.3

    Affected Products

    Vendor
    Gluster
    Product
    Glusterfs
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Storage

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-26253 (CVSS 7.5) — In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-rea…
    CVE-2022-48340 (CVSS 7.5) — In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-fre…
    CVE-2018-14651 (CVSS 8.8) — It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-109…
    CVE-2018-14660 (CVSS 6.5) — A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_…
    CVE-2018-14661 (CVSS 6.5) — It was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8.4, as shipped…
    CVE-2018-10927 (CVSS 8.1) — A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use…
    CVE-2018-10923 (CVSS 8.1) — It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs s…
    CVE-2018-10904 (CVSS 8.8) — It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extend…
    CVE-2018-10913 (CVSS 6.5) — An information disclosure vulnerability was discovered in glusterfs server. An attacker could issue a xattr re…
    CVE-2018-10907 (CVSS 8.8) — It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High