Home

CVE-2019-3885

Description

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.297

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM MQ 9.1Windows
Multiple Vulnerabilities are affected in IBM MQ 9.2Windows
Cluster resource manager (USN-3952-1) pacemaker_1.1.14-2ubuntu1.6_i386.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.14-2ubuntu1.6_amd64.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.18-0ubuntu1.1_i386.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.18-0ubuntu1.1_amd64.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.18-2ubuntu1.18.10.1_i386.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.18-2ubuntu1.18.10.1_amd64.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.18-2ubuntu1.19.04.1_i386.debLinux
Cluster resource manager (USN-3952-1) pacemaker_1.1.18-2ubuntu1.19.04.1_amd64.debLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-cluster-libs-2.0.1-4.el8_0.3.i686.rpmLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-cluster-libs-2.0.1-4.el8_0.3.x86_64.rpmLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-debugsource-2.0.1-4.el8_0.3.i686.rpmLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-debugsource-2.0.1-4.el8_0.3.x86_64.rpmLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-libs-2.0.1-4.el8_0.3.i686.rpmLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-libs-2.0.1-4.el8_0.3.x86_64.rpmLinux
(RHSA-2019:1279) pacemaker security and bug fix update pacemaker-schemas-2.0.1-4.el8_0.3.noarch.rpmLinux
Pacemaker-cluster-libs update (ELSA-2019-1279) pacemaker-cluster-libs-2.0.1-4.el8_0.3.x86_64.rpmLinux
Pacemaker-libs update (ELSA-2019-1279) pacemaker-libs-2.0.1-4.el8_0.3.x86_64.rpmLinux
Pacemaker-schemas update (ELSA-2019-1279) pacemaker-schemas-2.0.1-4.el8_0.3.noarch.rpmLinux
Pacemaker-cluster-libs update (ELSA-2019-1279) pacemaker-cluster-libs-2.0.1-4.el8_0.3.i686.rpmLinux
Pacemaker-libs update (ELSA-2019-1279) pacemaker-libs-2.0.1-4.el8_0.3.i686.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234