A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.

The remote host is affected by the vulnerability described in GLSA-202309-09 (Pacemaker: Multiple Vulnerabilities)

  - A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and     including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to     achieve local privilege escalation. (CVE-2018-16877)

  - A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS (CVE-2018-16878)

  - A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in     certain sensitive information to be leaked via the system logs. (CVE-2019-3885)

  - An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the     haclient group could use IPC communication with various daemons directly to perform certain tasks that     they would be prevented by ACLs from doing if they went through the configuration. (CVE-2020-25654)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1279 advisory.

  - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local     privesc (CVE-2018-16877)

  - pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

  - pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has pacemaker packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way pacemaker's client-server     authentication was implemented in versions up to and     including 2.0.0. A local attacker could use this flaw,     and combine it with other IPC weaknesses, to achieve     local privilege escalation. (CVE-2018-16877)

  - A use-after-free flaw was found in pacemaker up to and     including version 2.0.1 which could result in certain     sensitive information to be leaked via the system logs.
    (CVE-2019-3885)

  - A flaw was found in pacemaker up to and including     version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has pacemaker packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way pacemaker's client-server     authentication was implemented in versions up to and     including 2.0.0. A local attacker could use this flaw,     and combine it with other IPC weaknesses, to achieve     local privilege escalation. (CVE-2018-16877)

  - A use-after-free flaw was found in pacemaker up to and     including version 2.0.1 which could result in certain     sensitive information to be leaked via the system logs.
    (CVE-2019-3885)

  - A flaw was found in pacemaker up to and including     version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A flaw was found in pacemaker. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS. (CVE-2018-16878)

A use-after-free flaw was found in pacemaker which could result in certain sensitive information to be leaked via the system logs.
(CVE-2019-3885)

A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.
(CVE-2018-16877)

From Red Hat Security Advisory 2019:1279 :

An update for pacemaker is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.

Security Fix(es) :

* pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc (CVE-2018-16877)

* pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS (CVE-2018-16878)

* pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* Interrupted live migration will get full start rather than completed migration (BZ#1695247)

Security Fix(es) :

  - pacemaker: Insufficient local IPC client-server     authentication on the client's side can lead to local     privesc (CVE-2018-16877)

  - pacemaker: Insufficient verification inflicted     preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

  - pacemaker: Information disclosure through use-after-free     (CVE-2019-3885)

An update for pacemaker is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.

Security Fix(es) :

* pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc (CVE-2018-16877)

* pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS (CVE-2018-16878)

* pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es) :

* Interrupted live migration will get full start rather than completed migration (BZ#1695247)

An update for pacemaker is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.

Security Fix(es) :

* pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc (CVE-2018-16877)

* pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS (CVE-2018-16878)

* pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for pacemaker fixes the following issues :

Security issues fixed :

  - CVE-2019-3885: Fixed an information disclosure in log     output. (bsc#1131357)

  - CVE-2018-16877: Fixed a local privilege escalation     through insufficient IPC client-server authentication.
    (bsc#1131356)

  - CVE-2018-16878: Fixed a denial of service through     insufficient verification inflicted preference of     uncontrolled processes. (bsc#1131353)

Non-security issue fixed :

  - crmd: delete resource from lrmd when appropriate to     avoid timeouts with crmsh (bsc#1117381).

This update was imported from the SUSE:SLE-15:Update update project.

Security fix for CVE-2019-3885, CVE-2018-16877, CVE-2018-16878

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jan Pokorny discovered that Pacemaker incorrectly handled client-server authentication. A local attacker could possibly use this issue to escalate privileges. (CVE-2018-16877)

Jan Pokorny discovered that Pacemaker incorrectly handled certain verifications. A local attacker could possibly use this issue to cause a denial of service. (CVE-2018-16878)

Jan Pokorny discovered that Pacemaker incorrectly handled certain memory operations. A local attacker could possibly use this issue to obtain sensitive information in log outputs. This issue only applied to Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-3885).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
182196	GLSA-202309-09 : Pacemaker: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
145674	CentOS 8 : pacemaker (CESA-2019:1279)	Nessus	CentOS Local Security Checks	high
132469	NewStart CGSL CORE 5.05 / MAIN 5.05 : pacemaker Multiple Vulnerabilities (NS-SA-2019-0258)	Nessus	NewStart CGSL Local Security Checks	high
131424	NewStart CGSL CORE 5.04 / MAIN 5.04 : pacemaker Multiple Vulnerabilities (NS-SA-2019-0224)	Nessus	NewStart CGSL Local Security Checks	high
128289	Amazon Linux 2 : pacemaker (ALAS-2019-1275)	Nessus	Amazon Linux Local Security Checks	high
127588	Oracle Linux 8 : pacemaker (ELSA-2019-1279)	Nessus	Oracle Linux Local Security Checks	high
125531	Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20190528)	Nessus	Scientific Linux Local Security Checks	high
125446	RHEL 8 : pacemaker (RHSA-2019:1279)	Nessus	Red Hat Local Security Checks	high
125445	RHEL 7 : pacemaker (RHSA-2019:1278)	Nessus	Red Hat Local Security Checks	high
125213	openSUSE Security Update : pacemaker (openSUSE-2019-1400)	Nessus	SuSE Local Security Checks	high
124606	Fedora 28 : pacemaker (2019-e71f6f36ac)	Nessus	Fedora Local Security Checks	high
124604	Fedora 29 : pacemaker (2019-b502250ba4)	Nessus	Fedora Local Security Checks	high
124549	Fedora 30 : pacemaker (2019-e4c8de3fb7)	Nessus	Fedora Local Security Checks	high
124274	Ubuntu 16.04 LTS / 18.04 LTS : Pacemaker vulnerabilities (USN-3952-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2019-3885

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high