Total vulnerabilities in the database
The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.
| Software | From | Fixed in |
|---|---|---|
| redhat / gluster_storage | 3.0.0 | 3.1.2.x |
| redhat / gluster_storage | 4.1.0 | 4.1.4.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux_server | 6.0 | 6.0.x |
| redhat / enterprise_linux_virtualization | 4.0 | 4.0.x |