Summary
Jan Pokorný discovered that Pacemaker incorrectly handled client-server
authentication. A local attacker could possibly use this issue to escalate
privileges. (CVE-2018-16877)
Jan Pokorný discovered that Pacemaker incorrectly handled certain
verifications. A local attacker could possibly use this issue to cause a
denial of service. (CVE-2018-16878)
Jan Pokorný discovered that Pacemaker incorrectly handled certain memory
operations. A local attacker could possibly use this issue to obtain
sensitive information in log outputs. This issue only applied to Ubuntu
18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-3885)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | pacemaker | 1.1.14-2ubuntu1.6 |
| Ubuntu · 18.04 LTS 18.04:LTS | pacemaker | 1.1.18-0ubuntu1.1 |
Vulnerabilities 3
-
High 8.8
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.…
-
Medium 6.2
A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of u…
-
Low 3.3
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive …