CVE-2019-3885

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2019-04-18

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Ubuntu Linux (Canonical)
• Pacemaker (Clusterlabs)
• Fedora (Fedoraproject)

References

• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html
• http://www.securityfocus.com/bid/108036
• https://access.redhat.com/errata/RHSA-2019:1278
• https://access.redhat.com/errata/RHSA-2019:1279
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3885
• https://github.com/ClusterLabs/pacemaker/pull/1749
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3GCWFO7GL6MBU6C4BGFO3P…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FY4M4RMIG2POKC6OOFQODG…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HR6QUYGML735EI3HEEHYRD…
• https://security.gentoo.org/glsa/202309-09
• https://usn.ubuntu.com/3952-1/