CVE-2014-8177
Fixed in a distro release EPSS 2%
The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.
Products: redhat gluster_storage_management_console, redhat gluster_storage_server, redhat storage_native_client
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 7 | glusterfs | 0:3.7.1-16.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-cli | 0:3.7.1-16.el7 |
| Red Hat Enterprise Linux 7 | glusterfs-debuginfo | 0:3.7.1-16.el7 |
| Red Hat storage 3.1 nagios el6 | gluster-nagios-common | 0:0.2.2-1.el6rhs |
| Red Hat storage 3.1 nagios el6 | nagios-server-addons | 0:0.2.2-1.el6rhs |
| Red Hat storage 3.1 nagios el7 | gluster-nagios-common | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 nagios el7 | nagios-server-addons | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 nagios el7 | nagios-server-addons-debuginfo | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 nfs el6 | nfs-ganesha | 0:2.2.0-9.el6rhs |
| Red Hat storage 3.1 nfs el6 | nfs-ganesha-debuginfo | 0:2.2.0-9.el6rhs |
| Red Hat storage 3.1 nfs el6 | nfs-ganesha-gluster | 0:2.2.0-9.el6rhs |
| Red Hat storage 3.1 nfs el7 | nfs-ganesha | 0:2.2.0-9.el7rhgs |
| Red Hat storage 3.1 nfs el7 | nfs-ganesha-debuginfo | 0:2.2.0-9.el7rhgs |
| Red Hat storage 3.1 nfs el7 | nfs-ganesha-gluster | 0:2.2.0-9.el7rhgs |
| Red Hat storage 3.1 server el6 | gdeploy | 0:1.0-12.el6rhs |
| Red Hat storage 3.1 server el6 | gluster-nagios-addons | 0:0.2.5-1.el6rhs |
| Red Hat storage 3.1 server el6 | gluster-nagios-addons-debuginfo | 0:0.2.5-1.el6rhs |
| Red Hat storage 3.1 server el6 | gluster-nagios-common | 0:0.2.2-1.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-api | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-api-devel | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-cli | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-client-xlators | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-debuginfo | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-devel | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-fuse | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-ganesha | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-geo-replication | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-libs | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-rdma | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | glusterfs-server | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | gstatus | 0:0.65-1.el6rhs |
| Red Hat storage 3.1 server el6 | gstatus-debuginfo | 0:0.65-1.el6rhs |
| Red Hat storage 3.1 server el6 | openstack-swift | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-account | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-container | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-doc | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-object | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | openstack-swift-proxy | 0:1.13.1-6.el6ost |
| Red Hat storage 3.1 server el6 | python-gluster | 0:3.7.1-16.el6rhs |
| Red Hat storage 3.1 server el6 | redhat-storage-server | 0:3.1.1.0-2.el6rhs |
| Red Hat storage 3.1 server el6 | swiftonfile | 0:1.13.1-5.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-cli | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-debug-plugin | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-debuginfo | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-gluster | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-ethtool-options | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-faqemu | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-openstacknet | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-hook-qemucmdline | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-jsonrpc | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-python | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-python-zombiereaper | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-reg | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-tests | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-xmlrpc | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el6 | vdsm-yajsonrpc | 0:4.16.20-1.3.el6rhs |
| Red Hat storage 3.1 server el7 | gdeploy | 0:1.0-12.el7rhgs |
| Red Hat storage 3.1 server el7 | gluster-nagios-addons | 0:0.2.5-1.el7rhgs |
| Red Hat storage 3.1 server el7 | gluster-nagios-addons-debuginfo | 0:0.2.5-1.el7rhgs |
| Red Hat storage 3.1 server el7 | gluster-nagios-common | 0:0.2.2-1.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-api | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-api-devel | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-cli | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-client-xlators | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-debuginfo | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-devel | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-fuse | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-ganesha | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-geo-replication | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-libs | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-rdma | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | glusterfs-server | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | gstatus | 0:0.65-1.el7rhgs |
| Red Hat storage 3.1 server el7 | gstatus-debuginfo | 0:0.65-1.el7rhgs |
| Red Hat storage 3.1 server el7 | openstack-swift | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-account | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-container | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-doc | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-object | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | openstack-swift-proxy | 0:1.13.1-6.el7ost |
| Red Hat storage 3.1 server el7 | python-gluster | 0:3.7.1-16.el7rhgs |
| Red Hat storage 3.1 server el7 | redhat-storage-server | 0:3.1.1.0-2.el7rhgs |
| Red Hat storage 3.1 server el7 | swiftonfile | 0:1.13.1-5.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-cli | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-debug-plugin | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-debuginfo | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-gluster | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-ethtool-options | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-faqemu | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-openstacknet | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-hook-qemucmdline | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-jsonrpc | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-python | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-python-zombiereaper | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-reg | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-tests | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-xmlrpc | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3.1 server el7 | vdsm-yajsonrpc | 0:4.16.20-1.3.el7rhgs |
| Red Hat storage 3 client el6 | glusterfs | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-api | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-api-devel | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-cli | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-client-xlators | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-debuginfo | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-devel | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-fuse | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-libs | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | glusterfs-rdma | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el6 | python-gluster | 0:3.7.1-16.el6 |
| Red Hat storage 3 client el7 | glusterfs | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-api | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-api-devel | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-cli | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-client-xlators | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-debuginfo | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-devel | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-fuse | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-libs | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | glusterfs-rdma | 0:3.7.1-16.el7 |
| Red Hat storage 3 client el7 | python-gluster | 0:3.7.1-16.el7 |