Search vulnerabilities

Results 2

Export CSV
CVE-2014-8177

gluster-swift metadata constraints are not correctly enforced

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
CVE-2012-5635

GlusterFS: insecure temporary file creation

The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors