← Back

Fence Agents

fence-agents

Vendor: Clusterlabs • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-0104
1Clusterlabs
1Fence Agents
Nov 21, 2024
Jan 2, 2020
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates.
CVE-2019-10153
2Clusterlabs
Redhat
4Enterprise Linux
Enterprise Linux ServerEnterprise Linux Workstation+1 more
Jun 17, 2026
Jul 30, 2019
N/A· v4
5.0 MEDIUM· v3
4.0 MEDIUM· v2
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this cou...Show more
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.Show less