Clusterlabs vulnerabilities

Products

• Pacemaker 10
• Pcs 6
• Booth 2
• Fence-agents 2
• Hawk 2
• Libqb 2
• Pacemaker Command Line Interface 2

Newest

• clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 more Booth: specially crafted hash can lead to invalid hmac being accepted by booth server CVE-2024-3049 Fix available 5.9 MediumJune 6, 2024
• clusterlabs libqb log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the... CVE-2023-39976 Fix available 9.8 CriticalAugust 8, 2023
• clusterlabs pcs, redhat enterprise linux high availability, enterprise linux high availability eus +2 more It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of... CVE-2023-2319 9.8 CriticalMay 9, 2023
• clusterlabs pcs, debian linux +1 more A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a... CVE-2022-2735 Fix available 7.8 HighSeptember 1, 2022
• clusterlabs booth, debian linux, fedoraproject fedora +2 more The authfile directive in the booth config file is ignored, preventing use of authentication in... CVE-2022-2553 Fix available 6.5 MediumJuly 28, 2022
• clusterlabs pcs, debian linux +1 more A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired... CVE-2022-1049 Fix available 8.8 HighMarch 25, 2022
• clusterlabs pacemaker, cluster glue +1 more stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it... CVE-2010-2496 Fix available 5.5 MediumOctober 18, 2021
• clusterlabs hawk An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the... CVE-2021-3020 Fix available 8.8 HighMarch 8, 2021
• clusterlabs hawk An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code... CVE-2020-35458 Fix available 9.8 CriticalJanuary 12, 2021
• clusterlabs crmsh, debian linux +1 more ClusterLabs crmsh vulnerable to shell code injection CVE-2020-35459 Fix available 7.8 HighJanuary 12, 2021
• clusterlabs pacemaker, debian linux +1 more An ACL bypass flaw was found in pacemaker before 1.1.24-rc1 and 2.0.5-rc2. An attacker having a... CVE-2020-25654 Fix available 7.2 HighOctober 27, 2020
• clusterlabs fence-agents In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py... CVE-2014-0104 Fix available 5.9 MediumJanuary 2, 2020
• clusterlabs pacemaker Pacemaker before 1.1.6 configure script creates temporary files insecurely CVE-2011-5271 Fix available 5.5 MediumNovember 12, 2019
• clusterlabs fence-agents, redhat enterprise linux, enterprise linux server +1 more +3 more A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters... CVE-2019-10153 Fix available 5.0 MediumJuly 10, 2019
• clusterlabs libqb libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because... CVE-2019-12779 Fix available 7.1 HighJune 7, 2019
• clusterlabs pacemaker, canonical ubuntu linux, fedoraproject fedora +2 more A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result... CVE-2019-3885 Fix available 3.3 LowApril 17, 2019
• clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 more A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification... CVE-2018-16878 Fix available 6.2 MediumApril 17, 2019
• clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 more A flaw was found in the way pacemaker's client-server authentication was implemented in versions... CVE-2018-16877 Fix available 8.8 HighApril 17, 2019
• redhat pcs, clusterlabs pacemaker command line interface, redhat enterprise linux +2 more pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user... CVE-2018-1079 Fix available 8.7 HighApril 12, 2018
• redhat pcs, clusterlabs pacemaker command line interface, debian linux +1 more +3 more pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST... CVE-2018-1086 Fix available 4.3 MediumApril 9, 2018
• clusterlabs pcs ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due... CVE-2017-2661 Fix available 6.1 MediumMarch 12, 2018
• clusterlabs pcs, fedoraproject fedora, redhat enterprise linux +2 more Session fixation vulnerability in pcsd in pcs before 0.9.157. CVE-2016-0721 Fix available 8.1 HighApril 21, 2017
• clusterlabs pcs, fedoraproject fedora, redhat enterprise linux +2 more Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. CVE-2016-0720 Fix available 8.8 HighApril 21, 2017
• clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 more Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a... CVE-2016-7797 Fix available 7.5 HighNovember 22, 2016
• clusterlabs pacemaker, redhat enterprise linux server, enterprise linux server eus +2 more An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its... CVE-2016-7035 Fix available 8.8 HighNovember 3, 2016
• clusterlabs pacemaker, redhat enterprise linux high availability, enterprise linux resilient storage +2 more Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only... CVE-2015-1867 Fix available 7.5 HighAugust 12, 2015
• clusterlabs pacemaker, redhat enterprise linux +1 more Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management... CVE-2013-0281 Fix available 4.3 MediumNovember 23, 2013