Vulnerability Description
A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.
CVSS Score
3.3
LOW
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Clusterlabs | Pacemaker | <= 2.0.1 |
| Canonical | Ubuntu Linux | 16.04 |
| Fedoraproject | Fedora | 30 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html
- http://www.securityfocus.com/bid/108036Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:1278
- https://access.redhat.com/errata/RHSA-2019:1279
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3885Issue TrackingPatchThird Party Advisory
- https://github.com/ClusterLabs/pacemaker/pull/1749PatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://security.gentoo.org/glsa/202309-09
- https://usn.ubuntu.com/3952-1/Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00034.html
- http://www.securityfocus.com/bid/108036Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:1278
- https://access.redhat.com/errata/RHSA-2019:1279
FAQ
What is CVE-2019-3885?
CVE-2019-3885 is a vulnerability with a CVSS score of 3.3 (LOW). A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.
How severe is CVE-2019-3885?
CVE-2019-3885 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3885?
Check the references section above for vendor advisories and patch information. Affected products include: Clusterlabs Pacemaker, Canonical Ubuntu Linux, Fedoraproject Fedora.