CVE-2016-7797
Fixed in a distro release EPSS 3%
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
Products: clusterlabs pacemaker, opensuse leap, opensuse_project leap, suse linux_enterprise_high_availability, suse linux_enterprise_software_development_kit, redhat enterprise_linux_high_availability, redhat enterprise_linux_resilient_storage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pacemaker | 1.1.15~rc3-1 |
| Debian 13 | pacemaker | 1.1.15~rc3-1 |
| Debian 14 | pacemaker | 1.1.15~rc3-1 |
| Red Hat Enterprise Linux 7 | pacemaker | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-cli | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-cluster-libs | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-cts | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-debuginfo | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-doc | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-libs | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-libs-devel | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-nagios-plugins-metadata | 0:1.1.15-11.el7 |
| Red Hat Enterprise Linux 7 | pacemaker-remote | 0:1.1.15-11.el7 |
| SUSE Linux Enterprise High Availability Extension 11 SP4 | pacemaker | 1.1.12-18.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP1 | pacemaker | 1.1.13-20.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | pacemaker | 1.1.15-21.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | pacemaker | 1.1.13-20.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | pacemaker | 1.1.15-21.1 |
| Ubuntu 14.04 LTS | pacemaker | 1.1.10+git20130802-1ubuntu2.4 |
| Ubuntu 16.04 LTS | pacemaker | 1.1.14-2ubuntu1.2 |