In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.

The remote NewStart CGSL host, running version MAIN 6.06, has glusterfs packages installed that are affected by a vulnerability:

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glusterfs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-26253 advisory.

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has glusterfs packages installed that are affected by a vulnerability:

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6157-1 advisory.

    Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could     possibly use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of glusterfs installed on the remote host is prior to 3.12.2-18. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2071 advisory.

    In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer     over-read. (CVE-2023-26253)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5a54eea360 advisory.

    GlusterFS 10.4 GA     Security fix for CVE-2023-26253, CVE-2022-48340


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5989-1 advisory.

    Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could     possibly use this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
330496	NewStart CGSL MAIN 6.06 : glusterfs Vulnerability (NS-SA-2026-0053)	Nessus	NewStart CGSL Local Security Checks	Local	high
295523	Azure Linux 3.0 Security Update: glusterfs (CVE-2023-26253)	Nessus	Azure Linux Local Security Checks	Local	high
271291	NewStart CGSL MAIN 7.02 : glusterfs Vulnerability (NS-SA-2025-0247)	Nessus	NewStart CGSL Local Security Checks	Local	high
226210	Linux Distros Unpatched Vulnerability : CVE-2023-26253	Nessus	Misc.	Local	high
188251	EulerOS 2.0 SP11 : glusterfs (EulerOS-SA-2023-2685)	Nessus	Huawei Local Security Checks	Local	high
188224	EulerOS 2.0 SP11 : glusterfs (EulerOS-SA-2023-2643)	Nessus	Huawei Local Security Checks	Local	high
178092	EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2333)	Nessus	Huawei Local Security Checks	Local	high
178091	EulerOS 2.0 SP9 : glusterfs (EulerOS-SA-2023-2313)	Nessus	Huawei Local Security Checks	Local	high
177115	Ubuntu 22.04 LTS / 23.04 : GlusterFS vulnerability (USN-6157-1)	Nessus	Ubuntu Local Security Checks	Local	high
176941	Amazon Linux 2 : glusterfs (ALAS-2023-2071)	Nessus	Amazon Linux Local Security Checks	Local	high
175310	EulerOS 2.0 SP10 : glusterfs (EulerOS-SA-2023-1803)	Nessus	Huawei Local Security Checks	Local	high
175301	EulerOS 2.0 SP10 : glusterfs (EulerOS-SA-2023-1821)	Nessus	Huawei Local Security Checks	Local	high
174147	Fedora 37 : glusterfs (2023-5a54eea360)	Nessus	Fedora Local Security Checks	Local	high
173717	Ubuntu 16.04 ESM : GlusterFS vulnerability (USN-5989-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2023-26253

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high