Описание
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
It was found that the connection between a pacemaker cluster and a pacemaker_remote node could be shut down using a new unauthenticated connection. A remote attacker could use this flaw to cause a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | pacemaker | Not affected | ||
| Red Hat Enterprise Linux 7 | pacemaker | Fixed | RHSA-2016:2578 | 03.11.2016 |
Показывать по
Дополнительная информация
Статус:
EPSS
8.6 High
CVSS3
7.1 High
CVSS2
Связанные уязвимости
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
Pacemaker before 1.1.15, when using pacemaker remote, might allow remo ...
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
EPSS
8.6 High
CVSS3
7.1 High
CVSS2