ByteOS Network

Vulnerability Details :

CVE-2018-16878

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-18 Apr, 2019 | 00:00

Updated At-05 Aug, 2024 | 10:32

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:18 Apr, 2019 | 00:00

Updated At:05 Aug, 2024 | 10:32

▼CVE Numbering Authority (CNA)

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

Affected Products

Vendor

ClusterLabs

Product

pacemaker

Versions

Affected

affects up to and including version 2.0.1

Problem Types

Type	CWE ID	Description
CWE	CWE-400	CWE-400

Type: CWE

CWE ID: CWE-400

Description: CWE-400

Metrics

Version	Base score	Base severity	Vector
3.0	6.2	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 3.0

Base score: 6.2

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16878	N/A
https://github.com/ClusterLabs/pacemaker/pull/1749	N/A
http://www.securityfocus.com/bid/108039	vdb-entry
https://usn.ubuntu.com/3952-1/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HR6QUYGML735EI3HEEHYRDW7EG73BUH2/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GCWFO7GL6MBU6C4BGFO3P6L77DIBBF3/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FY4M4RMIG2POKC6OOFQODGKPRYXHET2F/	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html	vendor-advisory
https://access.redhat.com/errata/RHSA-2019:1278	vendor-advisory
https://access.redhat.com/errata/RHSA-2019:1279	vendor-advisory
https://lists.debian.org/debian-lts-announce/2021/01/msg00007.html	mailing-list
https://security.gentoo.org/glsa/202309-09	vendor-advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16878

Resource: N/A

Hyperlink: https://github.com/ClusterLabs/pacemaker/pull/1749

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/108039

Resource:

vdb-entry

Hyperlink: https://usn.ubuntu.com/3952-1/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HR6QUYGML735EI3HEEHYRDW7EG73BUH2/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GCWFO7GL6MBU6C4BGFO3P6L77DIBBF3/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FY4M4RMIG2POKC6OOFQODGKPRYXHET2F/

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html

Resource:

vendor-advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1278

Resource:

vendor-advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1279

Resource:

vendor-advisory

Hyperlink: https://lists.debian.org/debian-lts-announce/2021/01/msg00007.html

Resource:

mailing-list

Hyperlink: https://security.gentoo.org/glsa/202309-09

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16878	x_transferred
https://github.com/ClusterLabs/pacemaker/pull/1749	x_transferred
http://www.securityfocus.com/bid/108039	vdb-entry x_transferred
https://usn.ubuntu.com/3952-1/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HR6QUYGML735EI3HEEHYRDW7EG73BUH2/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GCWFO7GL6MBU6C4BGFO3P6L77DIBBF3/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FY4M4RMIG2POKC6OOFQODGKPRYXHET2F/	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html	vendor-advisory x_transferred
https://access.redhat.com/errata/RHSA-2019:1278	vendor-advisory x_transferred
https://access.redhat.com/errata/RHSA-2019:1279	vendor-advisory x_transferred
https://lists.debian.org/debian-lts-announce/2021/01/msg00007.html	mailing-list x_transferred
https://security.gentoo.org/glsa/202309-09	vendor-advisory x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16878

Resource:

x_transferred

Hyperlink: https://github.com/ClusterLabs/pacemaker/pull/1749

Resource:

x_transferred

Hyperlink: http://www.securityfocus.com/bid/108039

Resource:

vdb-entry

x_transferred

Hyperlink: https://usn.ubuntu.com/3952-1/

Resource:

vendor-advisory

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HR6QUYGML735EI3HEEHYRDW7EG73BUH2/

Resource:

vendor-advisory

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GCWFO7GL6MBU6C4BGFO3P6L77DIBBF3/

Resource:

vendor-advisory

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FY4M4RMIG2POKC6OOFQODGKPRYXHET2F/

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html

Resource:

vendor-advisory

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html

Resource:

vendor-advisory

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1278

Resource:

vendor-advisory

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:1279

Resource:

vendor-advisory

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2021/01/msg00007.html

Resource:

mailing-list

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202309-09

Resource:

vendor-advisory

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:18 Apr, 2019 | 18:29

Updated At:07 Nov, 2023 | 02:53

A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Secondary	3.0	6.2	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.0

Base score: 6.2

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

clusterlabs>>pacemaker>>Versions up to 2.0.1(inclusive)

cpe:2.3:a:clusterlabs:pacemaker:*:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Fedora Project

>>fedora>>28

cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*

Fedora Project

>>fedora>>29

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

Fedora Project

>>fedora>>30

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

openSUSE

>>leap>>15.0

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

openSUSE

>>leap>>42.3

cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>8.0

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_aus>>8.2

cpe:2.3:o:redhat:enterprise_linux_aus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_aus>>8.4

cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_aus>>8.6

cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.6

cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_tus>>8.2

cpe:2.3:o:redhat:enterprise_linux_tus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_tus>>8.4

cpe:2.3:o:redhat:enterprise_linux_tus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_tus>>8.6

cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-400	Primary	nvd@nist.gov
CWE-400	Secondary	secalert@redhat.com

CWE ID: CWE-400

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-400

Type: Secondary