Buffer Overflow Vulnerability in Red Hat Gluster Storage by Red Hat
CVE-2017-15086

7.4HIGH

Key Information:

Vendor

Red Hat
Status
Gluster Storage For Rhel 6
Vendor
CVE Published:
8 November 2017

What is CVE-2017-15086?

A vulnerability exists in Red Hat Gluster Storage 3.3 for RHEL 6 due to improper implementation of the fix for a previously reported vulnerability (CVE-2017-12151) as noted in erratum RHSA-2017:2858. This issue could potentially lead to a buffer overflow, which might allow an attacker to execute arbitrary code, leading to unauthorized access or system compromise.

Affected Version(s)

Gluster Storage for RHEL 6 3.3

References

http://www.securityfocus.com/bid/101555
vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2017:3110
vendor-advisoryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15086
x_refsource_CONFIRM

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.