Total vulnerabilities in the database
A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrary location via path traversal and execute arbitrary code on a glusterfs server node.
| Software | From | Fixed in |
|---|---|---|
| redhat / enterprise_linux | 7.0 | 7.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| debian / debian_linux | 8.0 | 8.0.x |
| redhat / enterprise_linux_server | 6.0 | 6.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / virtualization_host | 4.0 | 4.0.x |
| gluster / glusterfs | 3.12 | 3.12.14 |
| gluster / glusterfs | 4.1 | 4.1.8 |
| opensuse / leap | 15.1 | 15.1.x |