CVE-2012-4417
Fixed in a distro release EPSS <1%
GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Products: glusterfs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glusterfs | 3.2.7-5 |
| Debian 13 | glusterfs | 3.2.7-5 |
| Debian 14 | glusterfs | 3.2.7-5 |
| Red Hat storage 2.0 server el6 | glusterfs | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-debuginfo | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-devel | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-fuse | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-geo-replication | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-rdma | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | glusterfs-server | 0:3.3.0.5rhs-37.el6rhs |
| Red Hat storage 2.0 server el6 | sos | 0:2.2-17.1.el6rhs |
| Red Hat storage 2 client el5 | glusterfs | 0:3.3.0.5rhs-37.el5 |
| Red Hat storage 2 client el5 | glusterfs-debuginfo | 0:3.3.0.5rhs-37.el5 |
| Red Hat storage 2 client el5 | glusterfs-devel | 0:3.3.0.5rhs-37.el5 |
| Red Hat storage 2 client el5 | glusterfs-fuse | 0:3.3.0.5rhs-37.el5 |
| Red Hat storage 2 client el5 | glusterfs-rdma | 0:3.3.0.5rhs-37.el5 |
| Red Hat storage 3 client el6 | glusterfs | 0:3.3.0.5rhs-37.el6 |
| Red Hat storage 3 client el6 | glusterfs-debuginfo | 0:3.3.0.5rhs-37.el6 |
| Red Hat storage 3 client el6 | glusterfs-devel | 0:3.3.0.5rhs-37.el6 |
| Red Hat storage 3 client el6 | glusterfs-fuse | 0:3.3.0.5rhs-37.el6 |
| Red Hat storage 3 client el6 | glusterfs-rdma | 0:3.3.0.5rhs-37.el6 |