← Vulnerability feed

Vulnerability record · CVE-2015-1795 · published 27 June 2017

CVE-2015-1795: Redhat gluster storage permissions and access controls vulnerability

Redhat · Gluster Storage

Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.

7.8 CVSS 3.0 High EPSS 0.46% · top 61.9% CWE-264 · Permissions and access controls
7.8CVSS 3.0 base score, v2 7.2
0.46%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://rhn.redhat.com/errata/RHSA-2017-0484.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2017-0486.html Vendor Advisory
http://www.securityfocus.com/bid/99311 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038128 Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1200927 Issue TrackingThird Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2017-0484.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2017-0486.html Vendor Advisory
http://www.securityfocus.com/bid/99311 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038128 Third Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1200927 Issue TrackingThird Party AdvisoryVDB Entry

Track CVE-2015-1795 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2014-0160OpenSSL TLS/DTLS Heartbeat Extension Out-of-Bounds Read (Heartbleed)OpenSSL 1.0.1 before 1.0.1g mishandles Heartbeat Extension packets in its TLS and DTLS implementations, causing an out-of-bounds read of process memo…KEVEPSS 100%analysed9.8CVE-2017-7481Redhat openshift container platform improper input validation vulnerabilityAnsible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of looku…EPSS 4.8%8.8CVE-2021-44142Samba vfs_fruit heap out-of-bounds read/write enables code executionSamba's vfs_fruit module mishandles extended file attributes (xattr), allowing out-of-bounds heap reads and writes when specially crafted EAs are pro…EPSS 74%analysed8.8CVE-2018-14653Redhat gluster storage heap-based buffer overflow vulnerabilityThe Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer overflow in the '__server_getspec' function via the 'gf_…EPSS 2.8%8.8CVE-2018-10928Debian linux link following vulnerabilityA flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink destinations to point to file paths outside of the gl…EPSS 2.7%8.8CVE-2011-3045Google chrome integer overflow vulnerabilityInteger signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and oth…EPSS 3.6%8.1CVE-2020-25717Samba improper input validation vulnerabilityA flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalat…EPSS 1.6%8.1CVE-2018-1127Redhat gluster storage insufficient session expiration vulnerabilityTendrl API in Red Hat Gluster Storage before 3.4.0 does not immediately remove session tokens after a user logs out. Session tokens remain active for…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2015-1795), CISA KEV, FIRST EPSS (scores of 2026-10-14). This page is refreshed as NVD updates the record.