https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:46:41 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-17744 cnvd-2018-17744 https://cve.radiocsirt.org/vuln/cnvd-2018-17744 https://cve.radiocsirt.org/vuln/euvd-2026-64933 EUVD-2026-64933 https://cve.radiocsirt.org/vuln/euvd-2026-64933 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10928 <p>A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.</p> <p>A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10928 https://cve.radiocsirt.org/vuln/ghsa-884c-j6hw-f37p <p>A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.</p> <p>A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.</p> https://cve.radiocsirt.org/vuln/ghsa-884c-j6hw-f37p https://cve.radiocsirt.org/vuln/gsd-2018-10928 gsd-2018-10928 https://cve.radiocsirt.org/vuln/gsd-2018-10928 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0079-1 <p>Security update for glusterfs</p> <p>Security update for glusterfs</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0079-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2607 <p>glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory glusterfs: Information Exposure in posix_get_file_contents function in posix-helpers.c glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c glusterfs: I/O to arbitrary devices on storage server glusterfs: Device files can be created in arbitrary locations glusterfs: File status information leak and denial of service glusterfs: Improper resolution of symlinks allows for privilege escalation glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code glusterfs: Files can be renamed outside volume</p> <p>glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code glusterfs: Stack-based buffer overflow in server-rpc-fops.c allows remote attackers to execute arbitrary code glusterfs: Improper deserialization in dict.c:dict_unserialize() can allow attackers to read arbitrary memory glusterfs: Information Exposure in posix_get_file_contents function in posix-helpers.c glusterfs: remote denial of service of gluster volumes via posix_get_file_contents function in posix-helpers.c glusterfs: I/O to arbitrary devices on storage server glusterfs: Device files can be created in arbitrary locations glusterfs: File status information leak and denial of service glusterfs: Improper resolution of symlinks allows for privilege escalation glusterfs: Arbitrary file creation on storage server allows for execution of arbitrary code glusterfs: Files can be renamed outside volume</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2607 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10928 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs</p> <p>A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: glusterfs, Ubuntu:Pro:16.04:LTS: glusterfs, Ubuntu:Pro:18.04:LTS: glusterfs</p> <p>A flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gluster volume. An authenticated attacker could use this flaw to create arbitrary symlinks pointing anywhere on the server and execute arbitrary code on glusterfs server nodes.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10928