In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6157-1 advisory.

    Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could     possibly use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of glusterfs installed on the remote host is prior to 3.12.2-18. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2071 advisory.

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5a54eea360 advisory.

    GlusterFS 10.4 GA     Security fix for CVE-2023-26253, CVE-2022-48340


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5989-1 advisory.

    Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could     possibly use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
188251	EulerOS 2.0 SP11 : glusterfs (EulerOS-SA-2023-2685)	Nessus	Huawei Local Security Checks	high
188224	EulerOS 2.0 SP11 : glusterfs (EulerOS-SA-2023-2643)	Nessus	Huawei Local Security Checks	high
178092	EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2333)	Nessus	Huawei Local Security Checks	high
178091	EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2313)	Nessus	Huawei Local Security Checks	high
177115	Ubuntu 22.04 LTS / 23.04 : GlusterFS vulnerability (USN-6157-1)	Nessus	Ubuntu Local Security Checks	high
176941	Amazon Linux 2 : glusterfs (ALAS-2023-2071)	Nessus	Amazon Linux Local Security Checks	high
175310	EulerOS 2.0 SP10 : glusterfs (EulerOS-SA-2023-1803)	Nessus	Huawei Local Security Checks	high
175301	EulerOS 2.0 SP10 : glusterfs (EulerOS-SA-2023-1821)	Nessus	Huawei Local Security Checks	high
174147	Fedora 37 : glusterfs (2023-5a54eea360)	Nessus	Fedora Local Security Checks	high
173717	Ubuntu 16.04 ESM : GlusterFS vulnerability (USN-5989-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2023-26253

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high