[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flj7VhlgZWLwwd9i7VYXMfq9EIe3bTagHZj6936bjQe4":3,"g5a-family:redhat\u002Fgluster_storage":146,"g5a-ex:redhat\u002Fgluster_storage@*":154},{"success":4,"data":5},true,{"product":6,"versions":45,"topVulnerabilitiesByEpss":58,"kevVulnerabilities":119,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":44},"redhat","gluster_storage",12,26,1,"2022-02-21",[14,18,21,24,26,28,30,32,34,36,39,41],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"2.0",0,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},"2.1",2,{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},"3.0",10,{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},"3.0.0",{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},"3.1",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"3.13",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"3.13.1",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"3.13.2",{"version":35,"cve_count":20,"kev_count":16,"has_kev":17},"3.2",{"version":37,"cve_count":38,"kev_count":16,"has_kev":17},"3.3",3,{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"3.4",{"version":42,"cve_count":43,"kev_count":16,"has_kev":17},"3.5",4,"Gluster Storage by Redhat is a technology product with 12 tracked versions and 26 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[46,47,48,49,50,51,52,53,54,55,56,57],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},{"version":25,"cve_count":11,"kev_count":16,"has_kev":17},{"version":27,"cve_count":11,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":20,"kev_count":16,"has_kev":17},{"version":37,"cve_count":38,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":43,"kev_count":16,"has_kev":17},[59,67,72,78,85,91,97,104,109,115],{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":4,"epssScore":66},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07",7.5,"v3.1","High",0.99999,{"cveId":68,"description":69,"publishedDate":12,"cvssScore":70,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":71},"CVE-2021-44142","The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide \"...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.\" Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.",8.8,0.73589,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":77},"CVE-2017-12150","It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce \"SMB signing\" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text.","2018-07-26",7.4,0.1317,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":64,"severity":83,"isKev":17,"epssScore":84},"CVE-2016-2125","It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.","2018-10-31",6.5,"Medium",0.09199,{"cveId":86,"description":87,"publishedDate":75,"cvssScore":88,"cvssVersion":89,"severity":65,"isKev":17,"epssScore":90},"CVE-2017-12163","An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the exact area of server memory cannot be controlled by the attacker.",7.1,"v3.0",0.0759,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":96},"CVE-2018-1088","A privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client allowed to mount gluster volumes could also mount shared gluster storage volume and escalate privileges by scheduling malicious cronjob via symlink.","2018-04-18",8.1,0.05487,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":64,"severity":102,"isKev":17,"epssScore":103},"CVE-2017-7481","Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup() calls, they could inject Unicode strings to be parsed by the jinja2 templating system, resulting in code execution. By default, the jinja2 templating language is now marked as 'unsafe' and is not evaluated.","2018-07-19",9.8,"Critical",0.04782,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":70,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":108},"CVE-2011-3045","Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.","2012-03-22",0.03527,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":64,"severity":83,"isKev":17,"epssScore":114},"CVE-2019-3880","A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.","2019-04-09",5.4,0.0324,{"cveId":116,"description":117,"publishedDate":81,"cvssScore":70,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":118},"CVE-2018-14653","The Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_getspec_req' RPC message. A remote authenticated attacker could exploit this to cause a denial of service or other potential unspecified impact.",0.02769,[120],{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"severity":65,"isKev":4,"epssScore":66,"cisaVulnName":121,"cisaDateAdded":122,"cisaShortDescription":123,"cisaRequiredAction":124},"OpenSSL Information Disclosure Vulnerability","2022-05-04","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.","Apply updates per vendor instructions.",{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Gluster Storage by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gluster Storage by Redhat covering 12 versions with 26 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Gluster Storage vulnerabilities, Gluster Storage security, Gluster Storage CVE, Redhat Gluster Storage, Gluster Storage threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Gluster Storage KEV, Gluster Storage exploited vulnerabilities",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","Gluster Storage","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fgluster_storage",{"@type":135,"name":136,"url":137},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","12 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Gluster Storage Security Vulnerabilities","Security vulnerabilities affecting Gluster Storage by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":22},"2026-10-17T19:17:49.503Z",[147,150,152],{"product":148,"cves":149},"gluster_storage_server_for_on-premise",7,{"product":151,"cves":20},"gluster_storage_management_console",{"product":153,"cves":11},"gluster_storage_server",{"rows":155,"total":11,"capped":17,"failed":16},[156],{"cveId":60,"name":121,"severity":65,"cvss":63,"added":122,"epss":66,"published":157,"ranges":158,"checked":4,"hits":159,"covers":17},"2014-04-07T22:55:03.893",[19],[]]