https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:47:27.494046+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-64897 EUVD-2026-64897 2026-10-03T15:47:27.503361+00:00 EUVD-2026-64897 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10907 fkie_cve-2018-10907 2026-10-03T15:47:27.503397+00:00

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.

 https://cve.radiocsirt.org/vuln/ghsa-h429-wm24-5m9h GHSA-h429-wm24-5m9h 2026-10-03T15:47:27.503433+00:00

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.

 https://cve.radiocsirt.org/vuln/gsd-2018-10907 gsd-2018-10907 2026-10-03T15:47:27.503451+00:00 gsd-2018-10907 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0079-1 openSUSE-SU-2020:0079-1 — Security update for glusterfs 2026-10-03T15:47:27.503462+00:00

Security update for glusterfs

 https://cve.radiocsirt.org/vuln/rhsa-2018:2607 RHSA-2018:2607 — Red Hat Security Advisory: Red Hat Gluster Storage security, bug fix, and enhancement update 2026-10-03T15:47:27.503485+00:00

glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory glusterfs: Information Exposure in posix_get_file_contents function in posix-helpers.c glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c glusterfs: I/O to arbitrary devices on storage server glusterfs: Device files can be created in arbitrary locations glusterfs: File status information leak and denial of service glusterfs: Improper resolution of symlinks allows for privilege escalation glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code glusterfs: Files can be renamed outside volume

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10907 UBUNTU-CVE-2018-10907 2026-10-03T15:47:27.503516+00:00

Affected: Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs

It was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to functions in server-rpc-fopc.c allocating fixed size buffers using 'alloca(3)'. An authenticated attacker could exploit this by mounting a gluster volume and sending a string longer that the fixed buffer size to cause crash or potential code execution.