A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pacemakeramazon-linux-ami-2-upgrade-pacemaker-cliamazon-linux-ami-2-upgrade-pacemaker-cluster-libsamazon-linux-ami-2-upgrade-pacemaker-ctsamazon-linux-ami-2-upgrade-pacemaker-debuginfoamazon-linux-ami-2-upgrade-pacemaker-docamazon-linux-ami-2-upgrade-pacemaker-libsamazon-linux-ami-2-upgrade-pacemaker-libs-develamazon-linux-ami-2-upgrade-pacemaker-nagios-plugins-metadataamazon-linux-ami-2-upgrade-pacemaker-remote | Apr 27, 2020 | Apr 18, 2019 | |
| Centos_linux | — | centos-upgrade-pacemakercentos-upgrade-pacemaker-clicentos-upgrade-pacemaker-cli-debuginfocentos-upgrade-pacemaker-cluster-libscentos-upgrade-pacemaker-cluster-libs-debuginfocentos-upgrade-pacemaker-ctscentos-upgrade-pacemaker-debuginfocentos-upgrade-pacemaker-debugsourcecentos-upgrade-pacemaker-doccentos-upgrade-pacemaker-libscentos-upgrade-pacemaker-libs-debuginfocentos-upgrade-pacemaker-libs-develcentos-upgrade-pacemaker-nagios-plugins-metadatacentos-upgrade-pacemaker-remotecentos-upgrade-pacemaker-remote-debuginfocentos-upgrade-pacemaker-schemas | Aug 28, 2019 | Apr 18, 2019 |
| Debian | debian-upgrade-pacemaker | Jul 30, 2024 | Apr 18, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-cluster-pacemaker | Oct 2, 2023 | Apr 18, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-pacemaker-cluster-libsoracle-linux-upgrade-pacemaker-libsoracle-linux-upgrade-pacemaker-schemas | Jul 22, 2024 | Apr 17, 2019 |
| Redhat_linux | redhat-upgrade-pacemakerredhat-upgrade-pacemaker-cliredhat-upgrade-pacemaker-cli-debuginforedhat-upgrade-pacemaker-cluster-libsredhat-upgrade-pacemaker-cluster-libs-debuginforedhat-upgrade-pacemaker-ctsredhat-upgrade-pacemaker-debuginforedhat-upgrade-pacemaker-debugsourceredhat-upgrade-pacemaker-docredhat-upgrade-pacemaker-libsredhat-upgrade-pacemaker-libs-debuginforedhat-upgrade-pacemaker-libs-develredhat-upgrade-pacemaker-nagios-plugins-metadataredhat-upgrade-pacemaker-remoteredhat-upgrade-pacemaker-remote-debuginforedhat-upgrade-pacemaker-schemas | May 28, 2019 | Apr 18, 2019 | |
| Suse | — | suse-upgrade-libpacemaker-develsuse-upgrade-libpacemaker3suse-upgrade-pacemakersuse-upgrade-pacemaker-clisuse-upgrade-pacemaker-ctssuse-upgrade-pacemaker-remote | Apr 27, 2019 | Apr 18, 2019 |
| Ubuntu | ubuntu-upgrade-pacemaker | Apr 30, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub