ClusterLabs pacemaker
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-3885 | affects up to and including version 2.0.1 | A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be lea | HIGH 7.5 | 1.9 % | ||
| CVE-2018-16878 | affects up to and including version 2.0.1 | A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes | MEDIUM 6.2 | 0.4 % | ||
| CVE-2018-16877 | affects up to and including Pacemaker-2.0.0 | A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker | HIGH 8.8 | 0.4 % | ||
| CVE-2016-7035 | 1.1.16 | An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivile | HIGH 8.8 | 0.4 % |