ClusterLabs

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

ClusterLabs records in CISA KEV

No ClusterLabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pacemaker 10 records LOW Pcs 6 records MEDIUM Booth 2 records LOW Fence-agents 2 records LOW Hawk 2 records MEDIUM Libqb 2 records MEDIUM Pacemaker Command Line Interface 2 records MEDIUM Cluster Glue 1 record LOW

Records

2 records in Libqb · all components

TI-2023-20869 CVE-2023-39976 · GHSA-4fvg-53ww-3r5g

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages…

MEDIUM 51

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01182 Published 2023-08-08 Partial fix CWE-120

TI-2019-09565 CVE-2019-12779 · GHSA-wc62-h53h-g8qf

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack…

LOW 32

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.

CVSS 3.0HIGH 7.1 Local Low privileges No interaction EPSS 0.00655 Published 2019-06-07 Partial fix CWE-59

Open these records in search →

Critical	3
High	15
Medium	9
Low	0
No CVSS	0