Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-26253

Fixed in a distro release EPSS <1%CVSS 7.5

In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

Published 2023-02-21 · CVE record · OSV

Products: glusterfs

Distro releases

ReleasePackageFixed in
Amazon Linux 2glusterfs3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-api3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-api-devel3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-cli3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-client-xlators3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-devel3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-fuse3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-libs3.12.2-18.amzn2.0.2
Amazon Linux 2glusterfs-rdma3.12.2-18.amzn2.0.2
Amazon Linux 2python2-gluster3.12.2-18.amzn2.0.2
Debian 12glusterfs10.3-5
Debian 13glusterfs10.3-5
Debian 14glusterfs10.3-5
Ubuntu 20.04 LTSglusterfsno fix
Ubuntu 22.04 LTSglusterfs10.1-1ubuntu0.1
Ubuntu Pro 14.04 LTSglusterfsno fix
Ubuntu Pro 16.04 LTSglusterfs3.7.6-1ubuntu1+esm2
Ubuntu Pro 18.04 LTSglusterfsno fix