ClusterLabs vulnerabilities

6 published CVEs name ClusterLabs among the affected products.

Critical 0High 2Medium 3Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2019-10153
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm…
ClusterLabs · fence-agents
Medium5.0
CVE-2019-3885
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system…
ClusterLabs · pacemaker
Low3.3
CVE-2018-16878
A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS
ClusterLabs · pacemaker
Medium6.2
CVE-2018-16877
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this…
ClusterLabs · pacemaker
High8.8
CVE-2016-7035
An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a…
ClusterLabs · pacemaker
High8.8
CVE-2017-2661
ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new…
ClusterLabs · pcs
Medium6.1