CVE-2016-7797

Published: Mar 24, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

Affected (7)

Products: Clusterlabs: Pacemaker · Opensuse: Leap · Opensuse Project: Leap · +2 more

Show all products

Clusterlabs: Pacemaker · Opensuse: Leap · Opensuse Project: Leap · Suse: Linux Enterprise High Availability, Linux Enterprise Software Development Kit · Redhat: Enterprise Linux High Availability, Enterprise Linux Resilient Storage

1 product

1 product

Opensuse Project

1 product

2 products

Linux Enterprise High Availability

Linux Enterprise Software Development Kit

2 products

Enterprise Linux High Availability

Enterprise Linux Resilient Storage

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Clusterlabs Pacemaker	Up to 1.1.14

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.2
Opensuse Project Leap	Version 42.1
Suse Linux Enterprise High Availability	Version 12 sp2
Suse Linux Enterprise Software Development Kit	Version 12 sp2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux High Availability	Version 7.0
Redhat Enterprise Linux Resilient Storage	Version 7.0

Related CWEs

References (16)

http://bugs.clusterlabs.org/show_bug.cgi?id=5269

Source: secalert@redhat.com

Issue TrackingVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00038.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00001.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-12/msg00077.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2578.html

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/01/1

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/93261

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://github.com/ClusterLabs/pacemaker/commit/5ec24a2642bd0854b884d1a9b51d12371373b410

Source: secalert@redhat.com

PatchThird Party Advisory

http://bugs.clusterlabs.org/show_bug.cgi?id=5269

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00038.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-12/msg00077.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2578.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/01/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/93261

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://github.com/ClusterLabs/pacemaker/commit/5ec24a2642bd0854b884d1a9b51d12371373b410

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.