2018-09-11 13:06:17 -04:00
{
2019-04-17 21:06:06 -03:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
2019-03-18 04:07:26 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2018-16877" ,
2019-04-18 18:00:48 +00:00
"ASSIGNER" : "secalert@redhat.com" ,
"STATE" : "PUBLIC"
2019-04-17 21:06:06 -03:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "ClusterLabs" ,
"product" : {
"product_data" : [
{
"product_name" : "pacemaker" ,
"version" : {
"version_data" : [
{
"version_value" : "affects up to and including Pacemaker-2.0.0"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-287"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16877" ,
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16877" ,
"refsource" : "CONFIRM"
2019-04-17 21:16:50 -03:00
} ,
{
"url" : "https://github.com/ClusterLabs/pacemaker/pull/1749" ,
"name" : "https://github.com/ClusterLabs/pacemaker/pull/1749" ,
"refsource" : "CONFIRM"
2019-04-23 15:00:43 +00:00
} ,
{
"refsource" : "UBUNTU" ,
"name" : "USN-3952-1" ,
"url" : "https://usn.ubuntu.com/3952-1/"
2019-04-23 16:00:47 +00:00
} ,
{
"refsource" : "BID" ,
"name" : "108042" ,
"url" : "http://www.securityfocus.com/bid/108042"
2019-04-24 02:00:41 +00:00
} ,
{
"refsource" : "FEDORA" ,
"name" : "FEDORA-2019-e4c8de3fb7" ,
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HR6QUYGML735EI3HEEHYRDW7EG73BUH2/"
2019-05-04 03:00:43 +00:00
} ,
{
"refsource" : "FEDORA" ,
"name" : "FEDORA-2019-e71f6f36ac" ,
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3GCWFO7GL6MBU6C4BGFO3P6L77DIBBF3/"
2019-05-05 05:00:44 +00:00
} ,
{
"refsource" : "FEDORA" ,
"name" : "FEDORA-2019-b502250ba4" ,
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FY4M4RMIG2POKC6OOFQODGKPRYXHET2F/"
2019-05-08 15:00:57 +00:00
} ,
{
"refsource" : "SUSE" ,
"name" : "openSUSE-SU-2019:1342" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00012.html"
2019-05-15 21:00:52 +00:00
} ,
{
"refsource" : "SUSE" ,
"name" : "openSUSE-SU-2019:1400" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html"
2019-05-27 18:00:48 +00:00
} ,
{
"refsource" : "REDHAT" ,
"name" : "RHSA-2019:1278" ,
"url" : "https://access.redhat.com/errata/RHSA-2019:1278"
} ,
{
"refsource" : "REDHAT" ,
"name" : "RHSA-2019:1279" ,
"url" : "https://access.redhat.com/errata/RHSA-2019:1279"
2021-01-07 01:01:50 +00:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[debian-lts-announce] 20210106 [SECURITY] [DLA 2519-1] pacemaker security update" ,
"url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00007.html"
2023-09-29 11:00:35 +00:00
} ,
{
"refsource" : "GENTOO" ,
"name" : "GLSA-202309-09" ,
"url" : "https://security.gentoo.org/glsa/202309-09"
2019-04-17 21:06:06 -03:00
}
]
2019-03-18 04:07:26 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2019-04-17 21:06:06 -03:00
"value" : "A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation."
2019-03-18 04:07:26 +00:00
}
]
2019-04-17 21:06:06 -03:00
} ,
"impact" : {
"cvss" : [
[
{
"vectorString" : "8.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" ,
"version" : "3.0"
}
]
]
2019-03-18 04:07:26 +00:00
}
2019-04-18 18:00:48 +00:00
}
