Approved changes feed: RSS · Atom
cpe:2.3:a:red_hat:glusterfs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Red Hat (a3686528-5679-55c9-b393-abe45df26bd2) |
|---|---|
| Product | Glusterfs (183035c8-6151-5e0a-a943-8d788c70114e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-10930 |
vulnerable | 2026-06-08 05:10:37.393617 |
Details available
MEDIUM (6.5)
A flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated attacker could use this flaw to write to a destination outside the gluster volume.
Published: 2018-09-04T16:00:00.000Z
Updated: 2024-08-05T07:54:35.444Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10929 |
vulnerable | 2026-06-08 05:10:37.392809 |
Details available
HIGH (8.8)
A flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated attacker could use this flaw to create arbitrary files and execute arbitrary code on glusterfs server nodes.
Published: 2018-09-04T16:00:00.000Z
Updated: 2024-08-05T07:54:35.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10928 |
vulnerable | 2026-06-08 05:10:37.387480 |
Details available
HIGH (8.8)
A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.
Published: 2018-09-04T15:00:00.000Z
Updated: 2024-08-05T07:54:36.029Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10927 |
vulnerable | 2026-06-08 05:10:37.386650 |
Details available
HIGH (7.1)
A flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated attacker could use this flaw to leak information and execute remote denial of service by crashing gluster brick process.
Published: 2018-09-04T15:00:00.000Z
Updated: 2024-08-05T07:54:36.074Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10926 |
vulnerable | 2026-06-08 05:10:37.385719 |
Details available
HIGH (8.1)
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.
Published: 2018-09-04T15:00:00.000Z
Updated: 2024-08-05T07:54:35.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10924 |
vulnerable | 2026-06-08 05:10:37.384420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10923 |
vulnerable | 2026-06-08 05:10:37.383817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10914 |
vulnerable | 2026-06-08 05:10:37.355942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10913 |
vulnerable | 2026-06-08 05:10:37.355300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10907 |
vulnerable | 2026-06-08 05:10:37.343238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10904 |
vulnerable | 2026-06-08 05:10:37.336552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10841 |
vulnerable | 2026-06-08 05:10:37.162414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.