High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-05	CVE-2018-16509	An issue was discovered in Artifex Ghostscript before 9.24. local low complexity debian artifex canonical redhat	7.8
2018-09-04	CVE-2018-6555	Use After Free vulnerability in multiple products The irda_setsockopt function in net/irda/af_irda.c and later in drivers/staging/irda/net/af_irda.c in the Linux kernel before 4.17 allows local users to cause a denial of service (ias_object use-after-free and system crash) or possibly have unspecified other impact via an AF_IRDA socket. local low complexity linux debian canonical CWE-416	7.8
2018-09-04	CVE-2018-10929	A flaw was found in RPC request using gfs2_create_req in glusterfs server. network low complexity redhat debian gluster opensuse	8.8
2018-09-04	CVE-2018-10928	A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. network low complexity redhat debian gluster opensuse	8.8
2018-09-04	CVE-2018-10927	A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. network low complexity redhat debian gluster opensuse	8.1
2018-09-04	CVE-2018-10926	A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. network low complexity redhat debian gluster opensuse	8.8
2018-09-04	CVE-2018-10923	It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. network low complexity gluster redhat debian opensuse	8.1
2018-09-04	CVE-2018-10911	A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. network low complexity gluster redhat debian opensuse	7.5
2018-09-04	CVE-2018-10907	It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. network low complexity gluster redhat debian opensuse	8.8
2018-09-04	CVE-2018-10904	It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. network low complexity gluster redhat debian opensuse	8.8