USN-3952-1

Dashboard / Vulnerabilities / USN-3952-1

USN-3952-1

Summary: pacemaker vulnerabilities

Details: Jan Pokorný discovered that Pacemaker incorrectly handled client-server authentication. A local attacker could possibly use this issue to escalate privileges. (CVE-2018-16877) Jan Pokorný discovered that Pacemaker incorrectly handled certain verifications. A local attacker could possibly use this issue to cause a denial of service. (CVE-2018-16878) Jan Pokorný discovered that Pacemaker incorrectly handled certain memory operations. A local attacker could possibly use this issue to obtain sensitive information in log outputs. This issue only applied to Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-3885)

References: https://ubuntu.com/security/notices/USN-3952-1, https://ubuntu.com/security/CVE-2018-16877, https://ubuntu.com/security/CVE-2018-16878, https://ubuntu.com/security/CVE-2019-3885