Vendor
Clusterlabs
27 known vulnerabilities in products by Clusterlabs, 0 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-35458 | Clusterlabs Hawk: Code Injection | 9.8 | |
| High | CVE-2016-7797 | ClusterLabs Pacemaker: Denial of Service | 7.5 | |
| High | CVE-2016-0721 | ClusterLabs PCS: Session Fixation | 8.1 | |
| High | CVE-2022-1049 | Clusterlabs/pcs: Improper Authentication | 8.8 | |
| Critical | CVE-2023-39976 | ClusterLabs Libqb: Buffer Overflow | 9.8 | |
| High | CVE-2016-0720 | ClusterLabs PCS: Cross-Site Request Forgery (CSRF) | 8.8 | |
| High | CVE-2020-25654 | Pacemaker: Improper Access Control | 7.2 | |
| High | CVE-2021-3020 | Clusterlabs Hawk: security vulnerability | 8.8 | |
| Critical | CVE-2023-2319 | Pcs: security vulnerability | 9.8 | |
| Medium | CVE-2019-10153 | ClusterLabs Fence-agents: Encoding Error | 5.0 | |
| High | CVE-2018-1079 | Pcs: Files or Directories Accessible to External Parties | 8.7 | |
| Medium | CVE-2022-2553 | Booth: Improper Authentication | 6.5 | |
| High | CVE-2018-1086 | Red Hat Pcs: Improper Input Validation | 4.3 | |
| High | CVE-2019-3885 | ClusterLabs Pacemaker: Use After Free | 3.3 | |
| Medium | CVE-2017-2661 | ClusterLabs PCS: Cross-site Scripting | 6.1 | |
| High | CVE-2020-35459 | Clusterlabs Crmsh: Code Injection | 7.8 | |
| Not rated | CVE-2015-1867 | ClusterLabs Pacemaker: Privilege Escalation | — | |
| Not rated | CVE-2013-0281 | ClusterLabs Pacemaker: Denial of Service | — | |
| High | CVE-2019-12779 | ClusterLabs Libqb: security vulnerability | 7.1 | |
| Medium | CVE-2014-0104 | Fence-agents: security vulnerability | 5.9 | |
| High | CVE-2016-7035 | ClusterLabs Pacemaker: Improper Authorization | 8.8 | |
| High | CVE-2018-16877 | ClusterLabs Pacemaker: Improper Authentication | 8.8 | |
| Medium | CVE-2024-3049 | Booth: specially crafted hash can lead to invalid hmac being accepted by booth server | 5.9 | |
| High | CVE-2022-2735 | ClusterLabs/pcs: Incorrect Default Permissions | 7.8 | |
| Medium | CVE-2011-5271 | ClusterLabs Pacemaker: security vulnerability | 5.5 |
Products
| ClusterLabs Pacemaker | 10 | 0 |
| ClusterLabs/pcs | 6 | 0 |