PatchTheCVEgluster vulnerabilities
Recent CVEs affecting gluster products. 2 tracked.
gluster has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-21. Highest priority: CVE-2023-26253 (score 51/100).
- CVE-2023-26253 HIGH 7.5 DOWNGRADE In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-rea
- CVE-2022-48340 HIGH 7.5 DOWNGRADE In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-fre
FAQ
How do I fix gluster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gluster being exploited right now?
None of the tracked gluster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gluster CVE should I patch first?
CVE-2023-26253 currently ranks highest (51/100): In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-rea.