https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:46:48.812652+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-17744 cnvd-2018-17744 2026-10-03T05:46:48.822171+00:00 cnvd-2018-17744 https://cve.radiocsirt.org/vuln/euvd-2026-64933 EUVD-2026-64933 2026-10-03T05:46:48.822210+00:00 EUVD-2026-64933 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10928 fkie_cve-2018-10928 2026-10-03T05:46:48.822225+00:00

A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.

 https://cve.radiocsirt.org/vuln/ghsa-884c-j6hw-f37p GHSA-884c-j6hw-f37p 2026-10-03T05:46:48.822256+00:00

A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.

 https://cve.radiocsirt.org/vuln/gsd-2018-10928 gsd-2018-10928 2026-10-03T05:46:48.822273+00:00 gsd-2018-10928 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0079-1 openSUSE-SU-2020:0079-1 — Security update for glusterfs 2026-10-03T05:46:48.822284+00:00

Security update for glusterfs

 https://cve.radiocsirt.org/vuln/rhsa-2018:2607 RHSA-2018:2607 — Red Hat Security Advisory: Red Hat Gluster Storage security, bug fix, and enhancement update 2026-10-03T05:46:48.822308+00:00

glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory glusterfs: Information Exposure in posix_get_file_contents function in posix-helpers.c glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c glusterfs: I/O to arbitrary devices on storage server glusterfs: Device files can be created in arbitrary locations glusterfs: File status information leak and denial of service glusterfs: Improper resolution of symlinks allows for privilege escalation glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code glusterfs: Files can be renamed outside volume

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10928 UBUNTU-CVE-2018-10928 2026-10-03T05:46:48.822343+00:00

Affected: Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs

A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.