Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3462-1 advisory.

    Jan Pokorn and Alain Moulle discovered that Pacemaker incorrectly handled the IPC interface. A local     attacker could possibly use this issue to execute arbitrary code with root privileges. (CVE-2016-7035)

    Alain Moulle discovered that Pacemaker incorrectly handled authentication. A remote attacker could     possibly use this issue to shut down connections, leading to a denial of service. This issue only affected     Ubuntu 16.04 LTS. (CVE-2016-7797)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The following packages have been upgraded to a newer upstream version:
pacemaker (1.1.15).

Security Fix(es) :

  - It was found that the connection between a pacemaker     cluster and a pacemaker_remote node could be shut down     using a new unauthenticated connection. A remote     attacker could use this flaw to cause a denial of     service. (CVE-2016-7797)

Additional Changes :

This update for pacemaker fixes the following issues :

  - remote: Allow cluster and remote LRM API versions to     diverge (bsc#1009076)

  - libcrmcommon: fix CVE-2016-7035 (improper IPC guarding)     (bsc#1007433)

  - sysconfig: minor tweaks (typo, wording)

  - spec: more robust check for systemd being in use

  - spec: defines instead of some globals + error     suppression

  - various: issues discovered via valgrind and coverity

  - attrd_updater: fix usage of HAVE_ATOMIC_ATTRD

  - crmd: cl#5185 - Record pending operations in the CIB     before they are performed (bsc#1003565)

  - ClusterMon: fix to avoid matching other process with the     same PID

  - mcp: improve comments for sysconfig options

  - remove openssl-devel and libselinux-devel as build     dependencies

  - tools: crm_standby --version/--help should work without     cluster

  - libpengine: only log startup-fencing warning once

  - pacemaker.service: do not mistakenly suggest killing     fenced

  - libcrmcommon: report errors consistently when waiting     for data on connection (bsc#986644)

  - remote: Correctly calculate the remaining timeouts when     receiving messages (bsc#986644)

  - libfencing: report added node ID correctly

  - crm_mon: Do not call setenv with null value

  - pengine: Do not fence a maintenance node if it shuts     down cleanly (bsc#1000743)

  - ping: Avoid temporary files for fping check (bsc#987348)

  - all: clarify licensing and copyrights

  - crmd: Resend the shutdown request if the DC forgets

  - ping: Avoid temp files in fping_check (bsc#987348)

  - crmd: Ensure the R_SHUTDOWN is set whenever we ask the     DC to shut us down

  - crmd: clear remote node operation history only when it     comes up

  - libcib,libfencing,libtransition: handle memory     allocation errors without CRM_CHECK()

  - tools: make crm_mon XML schema handle resources with     multiple active

  - pengine: set OCF_RESKEY_CRM_meta_notify_active_* for     multistate resources

  - pengine: avoid null dereference in new same-node     ordering option

  - lrmd,libcluster: ensure g_hash_table_foreach() is never     passed a null table

  - crmd: don't log warning if abort_unless_down() can't     find down event

  - lib: Correction of the deletion of the notice     registration.

  - stonithd: Correction of the wrong connection process     name.

  - crmd: Keep a state of LRMD in the DC node latest.

  - pengine: avoid transition loop for start-then-stop +     unfencing

  - libpengine: allow pe_order_same_node option for     constraints

  - cts: Restart systemd-journald with 'systemctl restart     systemd-journald.socket' (bsc#995365)

  - libcrmcommon: properly handle XML comments when     comparing v2 patchset diffs

  - crmd: don't abort transitions for CIB comment changes

  - libcrmcommon: log XML comments correctly

  - libcrmcommon: remove extraneous format specifier from     log message

  - remote: cl#5269 - Notify other clients of a new     connection only if the handshake has completed     (bsc#967388, bsc#1002767, CVE-2016-7797)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for pacemaker fixes the following issues :

Security issues fixed :

  - CVE-2016-7797: Notify other clients of a new connection     only if the handshake has completed (bsc#967388,     bsc#1002767).

  - CVE-2016-7035: Fixed improper IPC guarding in pacemaker     (bsc#1007433).

Bug fixes :

  - bsc#1003565: crmd: Record pending operations in the CIB     before they are performed

  - bsc#1000743: pengine: Do not fence a maintenance node if     it shuts down cleanly

  - bsc#987348: ping: Avoid temporary files for fping check

  - bsc#986644: libcrmcommon: report errors consistently     when waiting for data on connection

  - bsc#986644: remote: Correctly calculate the remaining     timeouts when receiving messages

This update was imported from the SUSE:SLE-12-SP2:Update update project.

An update for pacemaker is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Pacemaker cluster resource manager is a collection of technologies working together to provide data integrity and the ability to maintain application availability in the event of a failure.

The following packages have been upgraded to a newer upstream version:
pacemaker (1.1.15). (BZ#1304771)

Security Fix(es) :

* It was found that the connection between a pacemaker cluster and a pacemaker_remote node could be shut down using a new unauthenticated connection. A remote attacker could use this flaw to cause a denial of service. (CVE-2016-7797)

Red Hat would like to thank Alain Moulle (ATOS/BULL) for reporting this issue.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

ID	Name	Product	Family	Severity
104143	Ubuntu 14.04 LTS / 16.04 LTS : Pacemaker vulnerabilities (USN-3462-1)	Nessus	Ubuntu Local Security Checks	high
95914	Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20161104)	Nessus	Scientific Linux Local Security Checks	high
95753	openSUSE Security Update : pacemaker (openSUSE-2016-1447)	Nessus	SuSE Local Security Checks	high
95531	openSUSE Security Update : pacemaker (openSUSE-2016-1376)	Nessus	SuSE Local Security Checks	high
95325	CentOS 7 : pacemaker (CESA-2016:2578)	Nessus	CentOS Local Security Checks	high
94541	RHEL 7 : pacemaker (RHSA-2016:2578)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2016-7797

high

Tenable Plugins

high

high

high

high

high

high