Enterprise Linux Resilient Storage

enterprise_linux_resilient_storage

Vendor: Redhat • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-44142 6Canonical DebianFedoraproject+3 more 23Codeready Linux Builder Debian LinuxDiskstation Manager+20 more Jun 17, 2026 Feb 21, 2022 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4...Show more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.Show less
CVE-2020-25717 5Canonical DebianFedoraproject+2 more 25Codeready Linux Builder Debian LinuxEnterprise Linux+22 more Jun 17, 2026 Feb 18, 2022 N/A· v4 8.1 HIGH· v3 8.5 HIGH· v2 A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
CVE-2016-2124 5Canonical DebianFedoraproject+2 more 24Codeready Linux Builder Debian LinuxEnterprise Linux+21 more Nov 21, 2024 Feb 18, 2022 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
CVE-2016-7797 5Clusterlabs OpensuseOpensuse Project+2 more 7Enterprise Linux High Availability Enterprise Linux Resilient StorageLeap+4 more May 13, 2026 Mar 24, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
CVE-2015-1867 2Clusterlabs Redhat 3Enterprise Linux High Availability Enterprise Linux Resilient StoragePacemaker May 6, 2026 Aug 12, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
CVE-2015-1848 2Fedora Redhat 5Enterprise Linux High Availability Enterprise Linux High Availability EusEnterprise Linux Resilient Storage+2 more May 6, 2026 May 14, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an...Show more The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.Show less