Alibaba Cloud Linux 3 : 0215: pacemaker (ALINUX3-SA-2026:0215)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0215 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-10649: A flaw was found in Pacemaker. An...

RHEL 8 : pacemaker (RHSA-2026:42075)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:42075 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...

RHEL 9 : pacemaker (RHSA-2026:41043)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41043 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...

OESA-2026-2990 pacemaker security update

Pacemaker is an advanced, scalable High-Availability cluster resource manager. Security Fixes: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed...

RHEL 9 : pacemaker (RHSA-2026:41042)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41042 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...

RHEL 10 : pacemaker (RHSA-2026:40833)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:40833 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in...

SUSE SLES12: libpacemaker-devel / libpacemaker3 / pacemaker / pacemaker-cli / etc (SUSE-SU-2026:2970-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2970-1 advisory. - CVE-2026-10649: Fixed denial of service via integer overflow in remote message decompression bsc1268381. Tenable has extracted the preceding...

Important: Red Hat Security Advisory: pacemaker security update

An update for pacemaker is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

OESA-2026-2938 pacemaker security update

Pacemaker is an advanced, scalable High-Availability cluster resource manager. Security Fixes: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed...

Linux Distros Unpatched Vulnerability : CVE-2026-10649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By...

MiracleLinux 7 : pacemaker-1.1.15-11.el7.2 (AXSA:2016-833:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-833:03 advisory. Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with...

EUVD-2016-8647

Malware in sbrugna...

EUVD-2020-18318

Malware in sbrugna...

EUVD-2017-4253

Malware in sbrugna...

PT-2022-4669 · Unknown +7 · Corosync/Pacemaker Pcs +7

Name of the Vulnerable Software and Affected Versions: corosync/pacemaker PCS affected versions not specified Description: The issue is related to insufficient authentication procedure in the corosync/pacemaker PCS utility, which can be exploited by a remote attacker to escalate privileges. This...

Scientific Linux Security Update : pacemaker on SL7.x i686/x86_64 (2020:5453)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5453-1 advisory. - pacemaker: ACL restrictions bypass CVE-2020-25654 Note that Nessus has not tested for this issue but has instead relied only on the application's...

The vulnerability of the Pacemaker resource management software for operating systems such as Ubuntu, Fedora, OpenSUSE Leap, Enterprise Linux, and Oracle Linux allows a perpetrator to increase their privileges.

The vulnerability of the Pacemaker resource management software for operating systems such as Ubuntu, Fedora, OpenSUSE Leap, Enterprise Linux, and Oracle Linux is related to insufficient authentication. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

Denial Of Service (DoS)

pacemaker is vulnerable to denial of service attacks. Local unauthenticated user can cause a system hang due to insufficient verification inflicted preference of uncontrolled processes...

pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc

A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation...