← Back

Linux Ha

linux-ha

5 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Heartbeat
heartbeat
3 CVEs
Ocf Resource Agents
ocf_resource_agents
1 CVE
Ha
ha
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-1198
1Linux Ha
1Ha
May 13, 2026
Aug 28, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.
CVE-2010-3389
1Linux Ha
1Ocf Resource Agents
Apr 29, 2026
Oct 20, 2010
N/A· v4
N/A· v3
6.9 MEDIUM· v2
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain...Show more
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.Show less
CVE-2007-4205
1Linux Ha
1Heartbeat
Apr 23, 2026
Aug 8, 2007
N/A· v4
N/A· v3
7.1 HIGH· v2
XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: this may be the same as...Show more
XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to port 694. NOTE: this may be the same as CVE-2006-3121.Show less
CVE-2006-3815
1Linux Ha
1Heartbeat
Apr 16, 2026
Jul 25, 2006
N/A· v4
N/A· v3
2.1 LOW· v2
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time win...Show more
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup.Show less
CVE-2002-1215
1Linux Ha
1Heartbeat
Apr 16, 2026
Oct 28, 2002
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claime...Show more
Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).Show less