Total vulnerabilities in the database
The Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to mount volumes could exploit this via the 'GF_XATTROP_ENTRY_IN_KEY' xattrop to create arbitrary, empty files on the target server.
| Software | From | Fixed in |
|---|---|---|
| redhat / gluster_storage | - | 4.1.4.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux_server | 6.0 | 6.0.x |
| redhat / enterprise_linux_virtualization | 4.0 | 4.0.x |
| redhat / virtualization | 4.0 | 4.0.x |
| redhat / virtualization_host | 4.0 | 4.0.x |
| debian / debian_linux | 9.0 | 9.0.x |