Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pacemaker | Jul 30, 2024 | Mar 24, 2017 |
| Redhat_linux | — | Upgrade pacemaker-nagios-plugins-metadataUpgrade pacemaker-cliUpgrade pacemaker-libs-develUpgrade pacemaker-remoteUpgrade pacemaker-docUpgrade pacemakerUpgrade pacemaker-libsUpgrade pacemaker-debuginfoUpgrade pacemaker-ctsUpgrade pacemaker-cluster-libs | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade libpacemaker3Upgrade pacemaker-remoteUpgrade libpacemaker-develUpgrade pacemakerUpgrade pacemaker-ctsUpgrade pacemaker-cli | Nov 23, 2016 | Nov 3, 2016 |
| Ubuntu | — | Upgrade pacemaker | Oct 25, 2017 | Nov 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub