| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| url |
VCID-76he-qtgt-hbhq |
| vulnerability_id |
VCID-76he-qtgt-hbhq |
| summary |
A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in glusterfsd/src/gf_attach.c may be used to cause denial of service. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-15096 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00056 |
| scoring_system |
epss |
| scoring_elements |
0.17813 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.00056 |
| scoring_system |
epss |
| scoring_elements |
0.17973 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.00056 |
| scoring_system |
epss |
| scoring_elements |
0.17988 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.00056 |
| scoring_system |
epss |
| scoring_elements |
0.17964 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-15096 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-15096
|
| risk_score |
0.8 |
| exploitability |
0.5 |
| weighted_severity |
1.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-76he-qtgt-hbhq |
|
| 8 |
| url |
VCID-7j6u-fv38-cyax |
| vulnerability_id |
VCID-7j6u-fv38-cyax |
| summary |
The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2014-3619 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01106 |
| scoring_system |
epss |
| scoring_elements |
0.78513 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.01106 |
| scoring_system |
epss |
| scoring_elements |
0.78579 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01106 |
| scoring_system |
epss |
| scoring_elements |
0.78596 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.01106 |
| scoring_system |
epss |
| scoring_elements |
0.78591 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2014-3619 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2014-3619
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7j6u-fv38-cyax |
|
| 9 |
| url |
VCID-axup-gcgv-jyez |
| vulnerability_id |
VCID-axup-gcgv-jyez |
| summary |
The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-5635 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.18964 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19129 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19149 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.0006 |
| scoring_system |
epss |
| scoring_elements |
0.19125 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-5635 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-5635
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-axup-gcgv-jyez |
|
| 10 |
| url |
VCID-cs3g-s71b-dybs |
| vulnerability_id |
VCID-cs3g-s71b-dybs |
| summary |
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-1112 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01953 |
| scoring_system |
epss |
| scoring_elements |
0.83859 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.01953 |
| scoring_system |
epss |
| scoring_elements |
0.83916 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.01953 |
| scoring_system |
epss |
| scoring_elements |
0.83924 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.01953 |
| scoring_system |
epss |
| scoring_elements |
0.8392 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-1112 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-1112
|
| risk_score |
3.6 |
| exploitability |
0.5 |
| weighted_severity |
7.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cs3g-s71b-dybs |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
| url |
VCID-jtkf-6zr4-mkde |
| vulnerability_id |
VCID-jtkf-6zr4-mkde |
| summary |
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-4417 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0015 |
| scoring_system |
epss |
| scoring_elements |
0.35354 |
| published_at |
2026-06-11T12:55:00Z |
|
| 1 |
| value |
0.0015 |
| scoring_system |
epss |
| scoring_elements |
0.35532 |
| published_at |
2026-06-12T12:55:00Z |
|
| 2 |
| value |
0.0015 |
| scoring_system |
epss |
| scoring_elements |
0.35554 |
| published_at |
2026-06-13T12:55:00Z |
|
| 3 |
| value |
0.0015 |
| scoring_system |
epss |
| scoring_elements |
0.35537 |
| published_at |
2026-06-14T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-4417 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-4417
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jtkf-6zr4-mkde |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|