3.0.0

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-31	CVE-2018-14654	The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. network low complexity redhat debian	6.5
2018-10-31	CVE-2018-14653	The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. network low complexity redhat debian	8.8
2018-10-31	CVE-2018-14652	The Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the 'features/index' translator via the code handling the 'GF_XATTR_CLRLK_CMD' xattr in the 'pl_getxattr' function. network low complexity redhat debian	6.5
2018-09-11	CVE-2018-1127	Session Fixation vulnerability in Redhat Gluster Storage Tendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. network high complexity redhat CWE-384	8.1
2018-07-13	CVE-2018-10875	Untrusted Search Path vulnerability in multiple products A flaw was found in ansible. local low complexity redhat debian suse canonical CWE-426	7.8
2018-04-18	CVE-2018-1088	A privilege escalation flaw was found in gluster 3.x snapshot scheduler. network high complexity redhat opensuse debian	8.1