A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local     privesc (CVE-2018-16877)

  - pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

  - A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS (CVE-2018-16878)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-202309-09 (Pacemaker: Multiple Vulnerabilities)

  - A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and     including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to     achieve local privilege escalation. (CVE-2018-16877)

  - A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS (CVE-2018-16878)

  - A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in     certain sensitive information to be leaked via the system logs. (CVE-2019-3885)

  - An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the     haclient group could use IPC communication with various daemons directly to perform certain tasks that     they would be prevented by ACLs from doing if they went through the configuration. (CVE-2020-25654)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1279 advisory.

  - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local     privesc (CVE-2018-16877)

  - pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

  - pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several security vulnerabilities were addressed in pacemaker, a cluster resource manager.

CVE-2018-16877

A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

CVE-2018-16878

An insufficient verification inflicted preference of uncontrolled processes can lead to denial of service.

CVE-2020-25654

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.

For Debian 9 stretch, these problems have been fixed in version 1.1.24-0+deb9u1.

We recommend that you upgrade your pacemaker packages.

For the detailed security status of pacemaker please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/pacemaker

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has pacemaker packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way pacemaker's client-server     authentication was implemented in versions up to and     including 2.0.0. A local attacker could use this flaw,     and combine it with other IPC weaknesses, to achieve     local privilege escalation. (CVE-2018-16877)

  - A use-after-free flaw was found in pacemaker up to and     including version 2.0.1 which could result in certain     sensitive information to be leaked via the system logs.
    (CVE-2019-3885)

  - A flaw was found in pacemaker up to and including     version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has pacemaker packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the way pacemaker's client-server     authentication was implemented in versions up to and     including 2.0.0. A local attacker could use this flaw,     and combine it with other IPC weaknesses, to achieve     local privilege escalation. (CVE-2018-16877)

  - A use-after-free flaw was found in pacemaker up to and     including version 2.0.1 which could result in certain     sensitive information to be leaked via the system logs.
    (CVE-2019-3885)

  - A flaw was found in pacemaker up to and including     version 2.0.1. An insufficient verification inflicted     preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A flaw was found in pacemaker. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS. (CVE-2018-16878)

A use-after-free flaw was found in pacemaker which could result in certain sensitive information to be leaked via the system logs.
(CVE-2019-3885)

A flaw was found in the way pacemaker's client-server authentication was implemented. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.
(CVE-2018-16877)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1279 advisory.

    - Improve clients' authentication of IPC servers (CVE-2018-16877)
    - Fix use-after-free with potential information disclosure (CVE-2019-3885)
    - Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - pacemaker: Insufficient local IPC client-server     authentication on the client's side can lead to local     privesc (CVE-2018-16877)

  - pacemaker: Insufficient verification inflicted     preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

  - pacemaker: Information disclosure through use-after-free     (CVE-2019-3885)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1279 advisory.

    The Pacemaker cluster resource manager is a collection of technologies working together to maintain data     integrity and application availability in the event of failures.

    Security Fix(es):

    * pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local     privesc (CVE-2018-16877)

    * pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

    * pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Interrupted live migration will get full start rather than completed migration (BZ#1695247)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1278 advisory.

    The Pacemaker cluster resource manager is a collection of technologies working together to maintain data     integrity and application availability in the event of failures.

    Security Fix(es):

    * pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local     privesc (CVE-2018-16877)

    * pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS     (CVE-2018-16878)

    * pacemaker: Information disclosure through use-after-free (CVE-2019-3885)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for pacemaker fixes the following issues :

Security issues fixed :

  - CVE-2019-3885: Fixed an information disclosure in log     output. (bsc#1131357)

  - CVE-2018-16877: Fixed a local privilege escalation     through insufficient IPC client-server authentication.
    (bsc#1131356)

  - CVE-2018-16878: Fixed a denial of service through     insufficient verification inflicted preference of     uncontrolled processes. (bsc#1131353)

Non-security issue fixed :

  - crmd: delete resource from lrmd when appropriate to     avoid timeouts with crmsh (bsc#1117381).

This update was imported from the SUSE:SLE-15:Update update project.

This update for pacemaker fixes the following issues :

Security issues fixed :

  - CVE-2018-16877: Fixed a local privilege escalation     through insufficient IPC client-server authentication.
    (bsc#1131356)

  - CVE-2018-16878: Fixed a denial of service through     insufficient verification inflicted preference of     uncontrolled processes. (bsc#1131353)

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Security fix for CVE-2019-3885, CVE-2018-16877, CVE-2018-16878

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3952-1 advisory.

    Jan Pokorn discovered that Pacemaker incorrectly handled client-server authentication. A local attacker     could possibly use this issue to escalate privileges. (CVE-2018-16877)

    Jan Pokorn discovered that Pacemaker incorrectly handled certain verifications. A local attacker could     possibly use this issue to cause a denial of service. (CVE-2018-16878)

    Jan Pokorn discovered that Pacemaker incorrectly handled certain memory operations. A local attacker     could possibly use this issue to obtain sensitive information in log outputs. This issue only applied to     Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04. (CVE-2019-3885)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198863	RHEL 6 : pacemaker (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
182196	GLSA-202309-09 : Pacemaker: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
145674	CentOS 8 : pacemaker (CESA-2019:1279)	Nessus	CentOS Local Security Checks	high
144814	Debian DLA-2519-1 : pacemaker security update	Nessus	Debian Local Security Checks	high
132469	NewStart CGSL CORE 5.05 / MAIN 5.05 : pacemaker Multiple Vulnerabilities (NS-SA-2019-0258)	Nessus	NewStart CGSL Local Security Checks	high
131424	NewStart CGSL CORE 5.04 / MAIN 5.04 : pacemaker Multiple Vulnerabilities (NS-SA-2019-0224)	Nessus	NewStart CGSL Local Security Checks	high
128289	Amazon Linux 2 : pacemaker (ALAS-2019-1275)	Nessus	Amazon Linux Local Security Checks	high
127588	Oracle Linux 8 : pacemaker (ELSA-2019-1279)	Nessus	Oracle Linux Local Security Checks	high
125531	Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20190528)	Nessus	Scientific Linux Local Security Checks	high
125446	RHEL 8 : pacemaker (RHSA-2019:1279)	Nessus	Red Hat Local Security Checks	high
125445	RHEL 7 : pacemaker (RHSA-2019:1278)	Nessus	Red Hat Local Security Checks	high
125213	openSUSE Security Update : pacemaker (openSUSE-2019-1400)	Nessus	SuSE Local Security Checks	high
124707	openSUSE Security Update : pacemaker (openSUSE-2019-1342)	Nessus	SuSE Local Security Checks	high
124606	Fedora 28 : pacemaker (2019-e71f6f36ac)	Nessus	Fedora Local Security Checks	high
124604	Fedora 29 : pacemaker (2019-b502250ba4)	Nessus	Fedora Local Security Checks	high
124549	Fedora 30 : pacemaker (2019-e4c8de3fb7)	Nessus	Fedora Local Security Checks	high
124274	Ubuntu 16.04 LTS / 18.04 LTS : Pacemaker vulnerabilities (USN-3952-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2018-16877

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high