High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-21	CVE-2022-48340	Use After Free vulnerability in Gluster Glusterfs 11.0 In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free. network low complexity gluster CWE-416	7.5
2023-02-21	CVE-2023-26253	Out-of-bounds Read vulnerability in Gluster Glusterfs 11.0 In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read. network low complexity gluster CWE-125	7.5
2018-10-31	CVE-2018-14651	It was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and CVE-2018-10926 was incomplete. network low complexity debian redhat gluster	8.8
2018-09-04	CVE-2018-10929	A flaw was found in RPC request using gfs2_create_req in glusterfs server. network low complexity redhat debian gluster opensuse	8.8
2018-09-04	CVE-2018-10928	A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. network low complexity redhat debian gluster opensuse	8.8
2018-09-04	CVE-2018-10927	A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. network low complexity redhat debian gluster opensuse	8.1
2018-09-04	CVE-2018-10926	A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. network low complexity redhat debian gluster opensuse	8.8
2018-09-04	CVE-2018-10923	It was found that the "mknod" call derived from mknod(2) can create files pointing to devices on a glusterfs server node. network low complexity gluster redhat debian opensuse	8.1
2018-09-04	CVE-2018-10911	A flaw was found in the way dic_unserialize function of glusterfs does not handle negative key length values. network low complexity gluster redhat debian opensuse	7.5
2018-09-04	CVE-2018-10907	It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. network low complexity gluster redhat debian opensuse	8.8