10 results · Feed
-
High 8.6
Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression
A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause …
-
Unscored —
stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attac…
-
Unscored —
An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group …
-
Unscored —
Pacemaker before 1.1.6 configure script creates temporary files insecurely
-
High 8.8
A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.…
-
Medium 6.2
A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of u…
-
Low 3.3
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive …
-
High 8.8
An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attac…
-
Unscored —
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node d…
-
Unscored —
Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not …