SUSE-SU-2019:1047-1: pacemaker&distro=SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2019:1047-1 is a vulnerability in pacemaker&distro=SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 26-04-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for pacemaker This update for pacemaker fixes the following issues: Security issues fixed: - CVE-2019-3885: Fixed an information disclosure in log output. (bsc#1131357) - CVE-2018-16877: Fixed a local privilege escalation through insufficient IPC client-server authentication. (bsc#1131356) - CVE-2018-16878: Fixed a denial of service through insufficient verification inflicted preference of uncontrolled processes. (bsc#1131353) Non-security issue fixed: - scheduler: Respect the order of constraints when relevant resources are being probed. (bsc#1117934, bsc#1128374)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- pacemaker&distro=SUSE Linux Enterprise High Availability Extension 12 SP4< 1.1.19+20181105.ccd6b5b10-3.10.1
- pacemaker&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 1.1.19+20181105.ccd6b5b10-3.10.1
1 vendor · 2 products