CVE-2018-16878

moderate-risk

Published 2019-04-18

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

Do I need to act?

0.02% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (20)

Pacemaker

Ubuntu Linux

Fedora

Debian Linux

Leap

Enterprise Linux

Enterprise Linux Aus

Enterprise Linux Eus

Enterprise Linux Tus

Affected Vendors

Debian Redhat Canonical Fedoraproject Opensuse Clusterlabs

References (26)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html

Broken Link http://www.securityfocus.com/bid/108039

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:1278

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:1279

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16878

Patch https://github.com/ClusterLabs/pacemaker/pull/1749

Mailing List https://lists.debian.org/debian-lts-announce/2021/01/msg00007.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...

https://security.gentoo.org/glsa/202309-09

Third Party Advisory https://usn.ubuntu.com/3952-1/

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html

Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html

Broken Link http://www.securityfocus.com/bid/108039

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:1278

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:1279

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16878

Patch https://github.com/ClusterLabs/pacemaker/pull/1749

and 6 more references

/ 100

moderate-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 20/34 · Moderate