← Back

Gluster Storage

gluster_storage

Vendor: Redhat • 25 CVEs

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-15085
1Redhat
1Gluster Storage
May 13, 2026
Nov 8, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.
CVE-2015-1795
1Redhat
1Gluster Storage
May 13, 2026
Jun 27, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.
CVE-2015-5242
1Redhat
1Gluster Storage
May 6, 2026
Nov 25, 2015
N/A· v4
N/A· v3
6.0 MEDIUM· v2
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribu...Show more
OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated users to execute arbitrary code via a crafted extended attribute (xattrs).Show less
CVE-2014-0160
13Broadcom
CanonicalDebian+10 more
28Application Processing Engine Firmware
Cp 1543 1 FirmwareDebian Linux+25 more
Apr 21, 2026
Apr 7, 2014
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted pa...Show more
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.Show less
CVE-2011-3045
6Debian
FedoraprojectGoogle+3 more
13Chrome
Debian LinuxEnterprise Linux+10 more
Apr 29, 2026
Mar 22, 2012
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (appl...Show more
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.Show less