CVE-2016-7797

概要

参考情報

• bugs.clusterlabs.org/show_bug.cgi · Issue Tracking
• lists.opensuse.org/opensuse-security-announce/2016-11/msg00038.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2016-12/msg00001.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2016-12/msg00077.html · Third Party Advisory
• rhn.redhat.com/errata/RHSA-2016-2578.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/10/01/1 · Mailing List
• securityfocus.com/bid/93261 · Third Party Advisory
• ClusterLabs/pacemaker commit 5ec24a2 · Patch

pacemaker のその他の脆弱性

• CVE-2010-2496中 5.5stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access t…
• CVE-2020-25654高 7.2An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communi…
• CVE-2011-5271中 5.5Pacemaker before 1.1.6 configure script creates temporary files insecurely
• CVE-2019-3885高 7.5A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be lea…
• CVE-2018-16878中 5.5A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes…