A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.
{ "binaries": [ { "binary_name": "libcib-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcib4", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcib4-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmcluster-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmcluster4", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmcluster4-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmcommon-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmcommon3", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmcommon3-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmservice-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmservice3", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libcrmservice3-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "liblrmd-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "liblrmd1", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "liblrmd1-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpe-rules2", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpe-rules2-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpe-status10", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpe-status10-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpengine-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpengine10", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libpengine10-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libstonithd-dev", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libstonithd2", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libstonithd2-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libtransitioner2", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "libtransitioner2-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-cli-utils", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-cli-utils-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-common", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-doc", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-remote", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-remote-dbgsym", "binary_version": "1.1.14-2ubuntu1.6" }, { "binary_name": "pacemaker-resource-agents", "binary_version": "1.1.14-2ubuntu1.6" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "libcib-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcib4", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcib4-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmcluster-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmcluster4", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmcluster4-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmcommon-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmcommon3", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmcommon3-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmservice-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmservice3", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libcrmservice3-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "liblrmd-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "liblrmd1", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "liblrmd1-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpe-rules2", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpe-rules2-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpe-status10", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpe-status10-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpengine-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpengine10", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libpengine10-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libstonithd-dev", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libstonithd2", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libstonithd2-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libtransitioner2", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "libtransitioner2-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-cli-utils", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-cli-utils-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-common", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-doc", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-remote", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-remote-dbgsym", "binary_version": "1.1.18-0ubuntu1.1" }, { "binary_name": "pacemaker-resource-agents", "binary_version": "1.1.18-0ubuntu1.1" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }