CVE-2013-0281
Fixed in a distro release EPSS 3%
Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not limit the duration of connections to the blocking sockets, which allows remote attackers to cause a denial of service (connection blocking).
Products: redhat enterprise_linux, clusterlabs pacemaker
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pacemaker | 1.1.10-1 |
| Debian 13 | pacemaker | 1.1.10-1 |
| Debian 14 | pacemaker | 1.1.10-1 |
| Red Hat Enterprise Linux 6 | pacemaker | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-cli | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-cluster-libs | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-cts | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-debuginfo | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-doc | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-libs | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-libs-devel | 0:1.1.10-14.el6 |
| Red Hat Enterprise Linux 6 | pacemaker-remote | 0:1.1.10-14.el6 |