CVE-2017-15085 — Channel Accessible by Non-Endpoint in HAT INC Gluster Storage FOR Rhel 6

CWE-300 — Channel Accessible by Non-EndpointCWE-200 — Sensitive Information Exposure6 documents6 sources
Severity
5.9MEDIUMNVD
CNA7.4
EPSS
0.3%
top 48.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
RED HAT INC Gluster Storage FOR Rhel 6Redhat Gluster Storage
Timeline
PublishedNov 8
Latest updateMay 13

Description

It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-44p5-fr45-3p7f: It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3↗2022-05-13
▶
CVEList
CVE-2017-15085: It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3↗2017-11-08
▶

📋Vendor Advisories

2
Red Hat
samba: Some code path don't enforce smb signing, when they should (incomplete fix of CVE-2017-12150)↗2017-10-24
▶
Debian
CVE-2017-15085: samba - It was discovered that the fix for CVE-2017-12150 was not properly shipped in er...↗2017
▶

💬Community

1
Bugzilla
CVE-2017-15085 samba: Some code path don't enforce smb signing, when they should (incomplete fix of CVE-2017-12150)↗2017-10-24
▶
CVE-2017-15085 — Channel Accessible by Non-Endpoint | cvebase