CVE-2016-7035
First published: Mon Sep 10 2018(Updated: )
An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Clusterlabs Pacemaker | <=1.1.16 | |
| Redhat Enterprise Linux Server | =6.0 | |
| Redhat Enterprise Linux Server | =7.0 | |
| Redhat Enterprise Linux Server Eus | =7.3 | |
| Redhat Enterprise Linux Server Eus | =7.4 | |
| Redhat Enterprise Linux Server Eus | =7.5 | |
| Redhat Enterprise Linux Server Eus | =7.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2016-2614.html
- http://rhn.redhat.com/errata/RHSA-2016-2675.html
- http://www.openwall.com/lists/oss-security/2016/11/03/5
- http://www.securityfocus.com/bid/94214
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7035
- https://github.com/ClusterLabs/pacemaker/commit/5d71e65049
- https://lists.clusterlabs.org/pipermail/users/2016-November/004432.html
- https://security.gentoo.org/glsa/201710-08
Frequently Asked Questions
What is the vulnerability ID for this flaw?
The vulnerability ID for this flaw is CVE-2016-7035.
What is the severity of CVE-2016-7035?
CVE-2016-7035 has a severity score of 7.8 (high).
Which software versions are affected by this vulnerability?
Clusterlabs Pacemaker versions up to and including 1.1.16, Redhat Enterprise Linux Server versions 6.0, 7.0, Redhat Enterprise Linux Server Eus versions 7.3, 7.4, 7.5, and 7.6 are affected by this vulnerability.
How can an attacker exploit this vulnerability?
An attacker with an unprivileged account on a Pacemaker node could use this vulnerability to force the Local Resource Manager daemon to execute a script as root and gain root access.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for this vulnerability is CWE-285.
- collector/nvd-index
- vendor/clusterlabs
- canonical/clusterlabs pacemaker
- version/clusterlabs pacemaker/1.1.16
- vendor/redhat
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/6.0
- version/redhat enterprise linux server/7.0
- canonical/redhat enterprise linux server eus
- version/redhat enterprise linux server eus/7.3
- version/redhat enterprise linux server eus/7.4
- version/redhat enterprise linux server eus/7.5
- version/redhat enterprise linux server eus/7.6