The vulnerability of the Pacemaker resource management software for operating systems based on Ubuntu, Fedora, and OpenSUSE Leap lies in its uncontrolled resource consumption, which allows a malicious actor to cause service interruptions.

🗓️ 22 Aug 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Pacemaker on Ubuntu, Fedora, OpenSUSE Leap has uncontrolled resource use causing interruptions.

Reporter	Title	Published	Views	Family All 73
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by Pacemaker vulnerabilities (CVE-2018-16878, CVE-2018-16877, CVE-2019-3885)	18 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.	21 Feb 202204:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple vulnerabilities in Pacemaker	18 Dec 202014:09	–	ibm
ATTACKERKB	CVE-2018-16878	18 Apr 201918:29	–	attackerkb
Tenable Nessus	Amazon Linux 2 : pacemaker (ALAS-2019-1275)	28 Aug 201900:00	–	nessus
Tenable Nessus	CentOS 8 : pacemaker (CESA-2019:1279)	29 Jan 202100:00	–	nessus
Tenable Nessus	Debian DLA-2519-1 : pacemaker security update	11 Jan 202100:00	–	nessus
Tenable Nessus	Fedora 29 : pacemaker (2019-b502250ba4)	6 May 201900:00	–	nessus
Tenable Nessus	Fedora 30 : pacemaker (2019-e4c8de3fb7)	2 May 201900:00	–	nessus
Tenable Nessus	Fedora 28 : pacemaker (2019-e71f6f36ac)	6 May 201900:00	–	nessus

Vulners

Node

clusterlabs pacemakerRange≤2.0.1

OR

novell opensuse_leapMatch42.3

OR

fedora fedoraMatch28

OR

canonical ubuntuMatch18.10

OR

fedora fedoraMatch29

OR

canonical ubuntuMatch19.04

OR

novell opensuse_leapMatch15.0

OR

fedora fedoraMatch30

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html
securityfocus	www.securityfocus.com/bid/108039
access	www.access.redhat.com/errata/RHSA-2019:1278
access	www.access.redhat.com/errata/RHSA-2019:1279
access	www.access.redhat.com/security/cve/cve-2018-16878
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/ClusterLabs/pacemaker/pull/1749
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3GCWFO7GL6MBU6C4BGFO3P6L77DIBBF3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/FY4M4RMIG2POKC6OOFQODGKPRYXHET2F/

21 Nov 2023 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 22.1

EPSS0.00438

pacemaker resource management ubuntu linux fedora linux opensuse leap