Read the docs
TI-2018-12087 Aliases CVE-2018-16877GHSA-5jf9-5f49-xqr5

Improper authentication in ClusterLabs pacemaker

Priority LOW 34CWE-287Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 5 fixed, 2 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-287.

Summary

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

Why it matters now

EPSS 0.00379 32nd percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 5 fixed, 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ClusterLabspacemakeraffects up to and including Pacemaker-2.0.0—No fix listedCNA
  • pacemaker VendorClusterLabs Affected affects up to and including Pacemaker-2.0.0 Fixed in — No fix listed CNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:a:clusterlabs:pacemaker:*:*:*:*:*:*:*:*up to 2.0.0VulnerableClusterLabs
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*18.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*19.04VulnerableCanonical
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*28VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*29VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*30VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*15.0VulnerableopenSUSE
  • cpe:2.3:a:clusterlabs:pacemaker:*:*:*:*:*:*:*:* Versions up to 2.0.0 Vulnerable ·ClusterLabs
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* Versions 18.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* Versions 19.04 Vulnerable ·Canonical
  • cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:* Versions 28 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* Versions 29 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* Versions 30 Vulnerable ·Fedoraproject
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·openSUSE
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*42.3VulnerableopenSUSE
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
  • cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:* Versions 42.3 Vulnerable ·openSUSE
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2019:1278 Released 2019-05-27 · Red Hat rating Important
    pacemaker security update
    • Red Hat Enterprise Linux Server High Availability (v. 7) pacemaker-1.1.19-8.el7_6.5, pacemaker-cli-1.1.19-8.el7_6.5, pacemaker-cluster-libs-1.1.19-8.el7_6.5 +6
    • Red Hat Enterprise Linux Server Resilient Storage (v. 7) pacemaker-1.1.19-8.el7_6.5, pacemaker-cli-1.1.19-8.el7_6.5, pacemaker-cluster-libs-1.1.19-8.el7_6.5 +6
  • RHSA-2019:1279 Released 2019-05-27 · Red Hat rating Important
    pacemaker security and bug fix update
    • Red Hat Enterprise Linux AppStream (v. 8) pacemaker-2.0.1-4.el8_0.3, pacemaker-cluster-libs-2.0.1-4.el8_0.3, pacemaker-libs-2.0.1-4.el8_0.3 +1
    • Red Hat Enterprise Linux High Availability (v. 8) pacemaker-2.0.1-4.el8_0.3, pacemaker-cli-2.0.1-4.el8_0.3, pacemaker-cts-2.0.1-4.el8_0.3 +4
    • Red Hat Enterprise Linux Resilient Storage (v. 8) pacemaker-2.0.1-4.el8_0.3, pacemaker-cli-2.0.1-4.el8_0.3, pacemaker-cts-2.0.1-4.el8_0.3 +4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    ClusterLabs pacemaker — openSUSE-SU-2019:1400

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — RHSA-2019:1278

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
Show 7 more groups
  • Advisory ·

    ClusterLabs pacemaker — RHSA-2019:1279

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — FEDORA-2019-e71f6f36ac

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — FEDORA-2019-b502250ba4

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — FEDORA-2019-e4c8de3fb7

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — GLSA-202309-09

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — USN-3952-1

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2019-02895 Use after free in ClusterLabs pacemakerPriority LOW 37
    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 3 records → Advisory →
  • Advisory ·

    ClusterLabs pacemaker — openSUSE-SU-2019:1342

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemakerPriority LOW 25
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Storage 3AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2019:1279
Red Hat Enterprise Linux High Availability (v. 8)Fixed RHSA-2019:1279
Red Hat Enterprise Linux Resilient Storage (v. 8)Fixed RHSA-2019:1279
Red Hat Enterprise Linux Server High Availability (v. 7)Fixed RHSA-2019:1278
Red Hat Enterprise Linux Server Resilient Storage (v. 7)Fixed RHSA-2019:1278

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-16877
  2. 2026-10-03 Alias added: GHSA-5jf9-5f49-xqr5

References

Patch 2

Advisory 10

  • TI-2016-06549 Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to… CVSS 3.0HIGH 7.5
  • TI-2016-06046 Improper authorization in ClusterLabs pacemaker CVSS 3.0HIGH 8.8
  • TI-2015-01677 Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote… CVSS 2.0HIGH 7.5
  • TI-2019-02895 Use after free in ClusterLabs pacemaker CVSS 3.0HIGH 7.5
  • TI-2020-15671 Improper access control in pacemaker CVSS 3.1HIGH 7.2
  • TI-2018-12088 Uncontrolled resource consumption in ClusterLabs pacemaker CVSS 3.1MEDIUM 5.5
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences