CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-16877

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.7%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 4.6

References

Products affected by CVE-2018-16877

Clusterlabs » Pacemaker » Version: 0.6.0

cpe:2.3:a:clusterlabs:pacemaker:0.6.0
Clusterlabs » Pacemaker » Version: 0.6.1

cpe:2.3:a:clusterlabs:pacemaker:0.6.1
Clusterlabs » Pacemaker » Version: 0.6.2

cpe:2.3:a:clusterlabs:pacemaker:0.6.2
Clusterlabs » Pacemaker » Version: 0.6.3

cpe:2.3:a:clusterlabs:pacemaker:0.6.3
Clusterlabs » Pacemaker » Version: 0.6.4

cpe:2.3:a:clusterlabs:pacemaker:0.6.4
Clusterlabs » Pacemaker » Version: 0.6.5

cpe:2.3:a:clusterlabs:pacemaker:0.6.5
Clusterlabs » Pacemaker » Version: 0.6.6

cpe:2.3:a:clusterlabs:pacemaker:0.6.6
Clusterlabs » Pacemaker » Version: 0.7.0

cpe:2.3:a:clusterlabs:pacemaker:0.7.0
Clusterlabs » Pacemaker » Version: 0.7.3

cpe:2.3:a:clusterlabs:pacemaker:0.7.3
Clusterlabs » Pacemaker » Version: 1.0.0

cpe:2.3:a:clusterlabs:pacemaker:1.0.0
Clusterlabs » Pacemaker » Version: 1.0.1

cpe:2.3:a:clusterlabs:pacemaker:1.0.1
Clusterlabs » Pacemaker » Version: 1.0.2

cpe:2.3:a:clusterlabs:pacemaker:1.0.2
Clusterlabs » Pacemaker » Version: 1.0.3

cpe:2.3:a:clusterlabs:pacemaker:1.0.3
Clusterlabs » Pacemaker » Version: 1.0.4

cpe:2.3:a:clusterlabs:pacemaker:1.0.4
Clusterlabs » Pacemaker » Version: 1.0.5

cpe:2.3:a:clusterlabs:pacemaker:1.0.5
Clusterlabs » Pacemaker » Version: 1.0.6

cpe:2.3:a:clusterlabs:pacemaker:1.0.6
Clusterlabs » Pacemaker » Version: 1.0.7

cpe:2.3:a:clusterlabs:pacemaker:1.0.7
Clusterlabs » Pacemaker » Version: 1.0.8

cpe:2.3:a:clusterlabs:pacemaker:1.0.8
Clusterlabs » Pacemaker » Version: 1.1.0

cpe:2.3:a:clusterlabs:pacemaker:1.1.0
Clusterlabs » Pacemaker » Version: 1.1.1

cpe:2.3:a:clusterlabs:pacemaker:1.1.1
Clusterlabs » Pacemaker » Version: 1.1.10

cpe:2.3:a:clusterlabs:pacemaker:1.1.10
Clusterlabs » Pacemaker » Version: 1.1.11

cpe:2.3:a:clusterlabs:pacemaker:1.1.11
Clusterlabs » Pacemaker » Version: 1.1.12

cpe:2.3:a:clusterlabs:pacemaker:1.1.12
Clusterlabs » Pacemaker » Version: 1.1.13

cpe:2.3:a:clusterlabs:pacemaker:1.1.13
Clusterlabs » Pacemaker » Version: 1.1.14

cpe:2.3:a:clusterlabs:pacemaker:1.1.14
Clusterlabs » Pacemaker » Version: 1.1.15

cpe:2.3:a:clusterlabs:pacemaker:1.1.15
Clusterlabs » Pacemaker » Version: 1.1.16

cpe:2.3:a:clusterlabs:pacemaker:1.1.16
Clusterlabs » Pacemaker » Version: 1.1.17

cpe:2.3:a:clusterlabs:pacemaker:1.1.17
Clusterlabs » Pacemaker » Version: 1.1.18

cpe:2.3:a:clusterlabs:pacemaker:1.1.18
Clusterlabs » Pacemaker » Version: 1.1.19

cpe:2.3:a:clusterlabs:pacemaker:1.1.19
Clusterlabs » Pacemaker » Version: 1.1.2

cpe:2.3:a:clusterlabs:pacemaker:1.1.2
Clusterlabs » Pacemaker » Version: 1.1.2.1

cpe:2.3:a:clusterlabs:pacemaker:1.1.2.1
Clusterlabs » Pacemaker » Version: 1.1.20

cpe:2.3:a:clusterlabs:pacemaker:1.1.20
Clusterlabs » Pacemaker » Version: 1.1.21

cpe:2.3:a:clusterlabs:pacemaker:1.1.21
Clusterlabs » Pacemaker » Version: 1.1.3

cpe:2.3:a:clusterlabs:pacemaker:1.1.3
Clusterlabs » Pacemaker » Version: 1.1.4

cpe:2.3:a:clusterlabs:pacemaker:1.1.4
Clusterlabs » Pacemaker » Version: 1.1.5

cpe:2.3:a:clusterlabs:pacemaker:1.1.5
Clusterlabs » Pacemaker » Version: 1.1.6

cpe:2.3:a:clusterlabs:pacemaker:1.1.6
Clusterlabs » Pacemaker » Version: 1.1.6.1

cpe:2.3:a:clusterlabs:pacemaker:1.1.6.1
Clusterlabs » Pacemaker » Version: 1.1.7

cpe:2.3:a:clusterlabs:pacemaker:1.1.7
Clusterlabs » Pacemaker » Version: 1.1.8

cpe:2.3:a:clusterlabs:pacemaker:1.1.8
Clusterlabs » Pacemaker » Version: 1.1.9

cpe:2.3:a:clusterlabs:pacemaker:1.1.9
Clusterlabs » Pacemaker » Version: 2.0.0

cpe:2.3:a:clusterlabs:pacemaker:2.0.0
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 28

cpe:2.3:o:fedoraproject:fedora:28
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 42.3

cpe:2.3:o:opensuse:leap:42.3
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Eus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat » Enterprise Linux Eus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_eus:8.6
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat » Enterprise Linux Server Aus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4
Redhat » Enterprise Linux Server Tus » Version: 8.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-16877

Products

Pricing

Contact Us