PatchTheCVEglusterfs vulnerabilities and fixes
Recent CVEs affecting glusterfs, with upgrade or downgrade steps. 2 tracked.
glusterfs has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-21. Highest priority: CVE-2023-26253 (score 51/100).
- CVE-2023-26253 HIGH 7.5 DOWNGRADE In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-rea
- CVE-2022-48340 HIGH 7.5 DOWNGRADE In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-fre
FAQ
How do I fix glusterfs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is glusterfs being exploited right now?
None of the tracked glusterfs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which glusterfs CVE should I patch first?
CVE-2023-26253 currently ranks highest (51/100): In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-rea.