Pacemaker Security Vulnerabilities and Issues — Pacemaker CVE List

Lucene search

ClusterlabsPacemaker

4 matches found

CVE•added 2019/04/18 6:29 p.m.•167 views

CVE-2018-16878

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

6.2CVSS6.1AI score0.00031EPSS

CVE•added 2019/04/18 6:29 p.m.•152 views

CVE-2018-16877

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

8.8CVSS7.4AI score0.00056EPSS

CVE•added 2019/04/18 6:29 p.m.•147 views

CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.

7.5CVSS7.2AI score0.00191EPSS

CVE•added 2019/11/12 2:15 p.m.•33 views

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely

5.5CVSS5.5AI score0.0041EPSS