Lucene search
RedHatRHSA-2016:2675HistoryNov 08, 2016 - 12:55 p.m.
(RHSA-2016:2675) Important: pacemaker security update
2016-11-0812:55:03
access.redhat.com
18
0.001 Low
EPSS
Percentile
26.7%
The Pacemaker cluster resource manager is a collection of technologies working together to provide data integrity and the ability to maintain application availability in the event of a failure.
Security Fix(es):
- An authorization flaw was found in Pacemaker, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine. (CVE-2016-7035)
This issue was discovered by Jan “poki” Pokorny (Red Hat) and Alain Moulle (ATOS/BULL).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | x86_64 | pacemaker-debuginfo | < 1.1.14-8.el6_8.2 | pacemaker-debuginfo-1.1.14-8.el6_8.2.x86_64.rpm |
| RedHat | 6 | x86_64 | pacemaker-cts | < 1.1.14-8.el6_8.2 | pacemaker-cts-1.1.14-8.el6_8.2.x86_64.rpm |
| RedHat | 6 | i686 | pacemaker-debuginfo | < 1.1.14-8.el6_8.2 | pacemaker-debuginfo-1.1.14-8.el6_8.2.i686.rpm |
| RedHat | 6 | i686 | pacemaker-cli | < 1.1.14-8.el6_8.2 | pacemaker-cli-1.1.14-8.el6_8.2.i686.rpm |
| RedHat | 6 | i686 | pacemaker-libs-devel | < 1.1.14-8.el6_8.2 | pacemaker-libs-devel-1.1.14-8.el6_8.2.i686.rpm |
| RedHat | 6 | i686 | pacemaker-cts | < 1.1.14-8.el6_8.2 | pacemaker-cts-1.1.14-8.el6_8.2.i686.rpm |
| RedHat | 6 | x86_64 | pacemaker-cluster-libs | < 1.1.14-8.el6_8.2 | pacemaker-cluster-libs-1.1.14-8.el6_8.2.x86_64.rpm |
| RedHat | 6 | x86_64 | pacemaker-remote | < 1.1.14-8.el6_8.2 | pacemaker-remote-1.1.14-8.el6_8.2.x86_64.rpm |
| RedHat | 6 | i686 | pacemaker-remote | < 1.1.14-8.el6_8.2 | pacemaker-remote-1.1.14-8.el6_8.2.i686.rpm |
| RedHat | 6 | x86_64 | pacemaker-libs-devel | < 1.1.14-8.el6_8.2 | pacemaker-libs-devel-1.1.14-8.el6_8.2.x86_64.rpm |
Related
openvas
openvas
Fedora Update for pacemaker FEDORA-2016-242ff9a2fa
2016-12-02 00:00:00
CentOS Update for pacemaker CESA-2016:2675 centos6
2016-11-13 00:00:00
Fedora Update for pacemaker FEDORA-2016-c1cbcc4528
2016-12-07 00:00:00
prion
prion
Authorization
2018-09-10 16:29:00
osv
osv
CVE-2016-7035
2018-09-10 16:29:00
nessus
nessus
Fedora 25 : pacemaker (2016-c1cbcc4528)
2016-11-15 00:00:00
RHEL 7 : pacemaker (RHSA-2016:2614)
2016-11-07 00:00:00
Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20161103)
2016-12-15 00:00:00
redhat
redhat
(RHSA-2016:2614) Important: pacemaker security and bug fix update
2016-11-03 11:40:05
centos
centos
pacemaker security update
2016-11-12 06:32:37
pacemaker security update
2016-11-25 16:47:54
cve
cve
CVE-2016-7035
2018-09-10 16:29:00
fedora
fedora
[SECURITY] Fedora 23 Update: pacemaker-1.1.15-2.fc23
2016-11-08 22:57:09
[SECURITY] Fedora 24 Update: pacemaker-1.1.15-2.fc24
2016-11-06 00:28:32
[SECURITY] Fedora 25 Update: pacemaker-1.1.15-3.fc25
2016-11-10 16:39:31
redhatcve
redhatcve
CVE-2016-7035
2016-11-03 08:47:26
veracode
veracode
Privilege Escalation
2019-01-15 09:14:27
cvelist
cvelist
CVE-2016-7035
2018-09-10 16:00:00
nvd
nvd
CVE-2016-7035
2018-09-10 16:29:00
debiancve
debiancve
CVE-2016-7035
2018-09-10 16:29:00
ubuntucve
ubuntucve
CVE-2016-7035
2016-11-03 00:00:00
ubuntu
ubuntu
Pacemaker vulnerabilities
2017-10-24 00:00:00
gentoo
gentoo
Pacemaker: Multiple vulnerabilities
2017-10-08 00:00:00
suse
suse
Security update for pacemaker (important)
2016-11-22 15:07:40
Security update for pacemaker (important)
2016-12-01 18:13:18