Lucene search
+L

850 matches found

Positive Technologies
Positive Technologies
added 2018/12/10 12:0 a.m.4 views

PT-2018-2976 · Clusterlabs +5 · Pacemaker +5

Name of the Vulnerable Software and Affected Versions: Pacemaker versions up to and including 2.0.1 Description: The issue is related to an uncontrolled resource consumption in the Pacemaker cluster resource management software, which can be exploited to cause a denial of service DoS. This could...

9CVSS6.4AI score0.02002EPSS
SaveExploits0References91
Tenable Nessus
Tenable Nessus
added 2018/12/04 12:0 a.m.34 views

RHEL 7 : atomic-openshift-utils (RHSA-2016:2778)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2778 advisory. Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud...

9.1CVSS8.5AI score0.03253EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2018/11/22 12:0 a.m.4 views

PT-2018-3485 · Clusterlabs +5 · Pacemaker +5

Name of the Vulnerable Software and Affected Versions: Pacemaker versions up to and including 2.0.0 Description: A flaw was found in the way Pacemaker's client-server authentication was implemented, allowing a local attacker to achieve local privilege escalation by combining this flaw with other...

9CVSS6.7AI score0.02002EPSS
SaveExploits0References97
RedHat Linux
RedHat Linux
added 2018/10/02 7:1 p.m.100 views

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 8 director security and bug fix update

An update for instack-undercloud and openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 8.0 Liberty director. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS7AI score0.88368EPSS
SaveExploits5References9
OSV
OSV
added 2018/09/10 4:29 p.m.25 views

CVE-2016-7035

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain roo...

7.8CVSS6.9AI score
SaveExploits0References8
NVD
NVD
added 2018/09/10 4:29 p.m.16 views

CVE-2016-7035

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain roo...

8.8CVSS8.7AI score0.00395EPSS
SaveExploits0References8
Prion
Prion
added 2018/09/10 4:29 p.m.38 views

Authorization

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain roo...

7.2CVSS7.2AI score0.00395EPSS
SaveExploits0References8Affected Software3
OSV
OSV
added 2018/09/10 4:29 p.m.5 views

DEBIAN-CVE-2016-7035

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain roo...

7.8CVSS8AI score0.00395EPSS
SaveExploits0References1
CVE
CVE
added 2018/09/10 4:0 p.m.102 views

CVE-2016-7035

CVE-2016-7035 affects Pacemaker prior to 1.1.16, due to an authorization flaw on the IPC interface. An unprivileged local attacker could force the Local Resource Manager daemon to execute a script as root, gaining full euid/root access. The issue is mitigated by upgrading Pacemaker to 1.1.16 or n...

8.8CVSS7.5AI score0.00395EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2018/09/10 4:0 p.m.25 views

CVE-2016-7035

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain roo...

8.8CVSS8.4AI score0.00395EPSS
SaveExploits0
Cvelist
Cvelist
added 2018/09/10 4:0 p.m.20 views

CVE-2016-7035

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain roo...

8.8CVSS8.2AI score0.00395EPSS
SaveExploits0References8
Cent OS
Cent OS
added 2018/06/21 11:55 a.m.71 views

pcs security update

CentOS Errata and Security Advisory CESA-2018:1927 An update for pcs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS6.6AI score0.01655EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2018/06/19 5:8 a.m.70 views

Moderate: Red Hat Security Advisory: pcs security update

An update for pcs is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

7.5CVSS6.6AI score0.01655EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2018/06/05 12:0 a.m.33 views

CentOS Update for pcs CESA-2018:1060 centos7

Check the version of pcs SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882895";...

8.7CVSS6.8AI score0.0245EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/05/31 12:0 a.m.41 views

CentOS 7 : pcs (CESA-2018:1060)

An update for pcs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

8.7CVSS6.4AI score0.0245EPSS
SaveExploits0References4
Cent OS
Cent OS
added 2018/05/30 6:24 p.m.110 views

pcs security update

CentOS Errata and Security Advisory CESA-2018:1060 An update for pcs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.7CVSS6.6AI score0.0245EPSS
SaveExploits0References7
NVD
NVD
added 2018/04/25 1:29 p.m.27 views

CVE-2017-12712

The authentication algorithm in Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017, which involves an authentication key and time stamp, can be compromised or bypassed, which may allow a nearby attacker to issue unauthorized commands to the pacemaker via RF communications. CVSS v3...

8.8CVSS8.9AI score0.01084EPSS
SaveExploits0References2
NVD
NVD
added 2018/04/25 1:29 p.m.24 views

CVE-2017-12714

Abbott Laboratories pacemakers manufactured prior to Aug 28, 2017 do not restrict or limit the number of correctly formatted "RF wake-up" commands that can be received, which may allow a nearby attacker to repeatedly send commands to reduce pacemaker battery life. CVSS v3 base score: 5.3, CVSS...

6.5CVSS7.7AI score0.00655EPSS
SaveExploits0References2
HackRead
HackRead
added 2018/04/20 2:55 p.m.18 views

Medicine pumps & Pacemaker threat as Dr’s simulate hacked overdose

By Waqas Doctors Demonstrate Dangers of Hacked Medicine Pumps By Simulating Emergency This is a post from HackRead.com Read the original post: Medicine pumps & Pacemaker threat as Dr’s simulate hacked overdose...

2.9AI score
SaveExploits0
Fedora
Fedora
added 2018/04/19 12:32 a.m.34 views

[SECURITY] Fedora 27 Update: pcs-0.9.164-1.fc27

pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters...

8.7CVSS3.5AI score0.01655EPSS
SaveExploits0
Rows per page
Query Builder