ID CVE-2016-7797
Summary Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.
References
Vulnerable Configurations
  • cpe:2.3:a:clusterlabs:pacemaker:1.1.14
    cpe:2.3:a:clusterlabs:pacemaker:1.1.14
  • cpe:2.3:o:suse:linux_enterprise_high_availability:12:sp2
    cpe:2.3:o:suse:linux_enterprise_high_availability:12:sp2
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2
    cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2
  • cpe:2.3:o:opensuse_project:leap:42.1
    cpe:2.3:o:opensuse_project:leap:42.1
  • OpenSUSE Project Leap 42.2
    cpe:2.3:o:opensuse_project:leap:42.2
  • cpe:2.3:o:redhat:enterprise_linux_resilient_storage:7.0
    cpe:2.3:o:redhat:enterprise_linux_resilient_storage:7.0
  • cpe:2.3:o:redhat:enterprise_linux_high_availability:7.0
    cpe:2.3:o:redhat:enterprise_linux_high_availability:7.0
CVSS
Base: 5.0 (as of 27-03-2017 - 22:55)
Impact:
Exploitability:
CWE CWE-254
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
nessus via4
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2016-2578.NASL
    description An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The Pacemaker cluster resource manager is a collection of technologies working together to provide data integrity and the ability to maintain application availability in the event of a failure. The following packages have been upgraded to a newer upstream version: pacemaker (1.1.15). (BZ#1304771) Security Fix(es) : * It was found that the connection between a pacemaker cluster and a pacemaker_remote node could be shut down using a new unauthenticated connection. A remote attacker could use this flaw to cause a denial of service. (CVE-2016-7797) Red Hat would like to thank Alain Moulle (ATOS/BULL) for reporting this issue. Additional Changes : For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.
    last seen 2018-09-02
    modified 2018-07-02
    plugin id 95325
    published 2016-11-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=95325
    title CentOS 7 : pacemaker (CESA-2016:2578)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2016-2578.NASL
    description An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. The Pacemaker cluster resource manager is a collection of technologies working together to provide data integrity and the ability to maintain application availability in the event of a failure. The following packages have been upgraded to a newer upstream version: pacemaker (1.1.15). (BZ#1304771) Security Fix(es) : * It was found that the connection between a pacemaker cluster and a pacemaker_remote node could be shut down using a new unauthenticated connection. A remote attacker could use this flaw to cause a denial of service. (CVE-2016-7797) Red Hat would like to thank Alain Moulle (ATOS/BULL) for reporting this issue. Additional Changes : For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.
    last seen 2018-09-01
    modified 2018-07-26
    plugin id 94541
    published 2016-11-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=94541
    title RHEL 7 : pacemaker (RHSA-2016:2578)
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-3462-1.NASL
    description Jan Pokorny and Alain Moulle discovered that Pacemaker incorrectly handled the IPC interface. A local attacker could possibly use this issue to execute arbitrary code with root privileges. (CVE-2016-7035) Alain Moulle discovered that Pacemaker incorrectly handled authentication. A remote attacker could possibly use this issue to shut down connections, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7797). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2018-09-02
    modified 2018-08-06
    plugin id 104143
    published 2017-10-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=104143
    title Ubuntu 14.04 LTS / 16.04 LTS : pacemaker vulnerabilities (USN-3462-1)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2016-1376.NASL
    description This update for pacemaker fixes the following issues : Security issues fixed : - CVE-2016-7797: Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767). - CVE-2016-7035: Fixed improper IPC guarding in pacemaker (bsc#1007433). Bug fixes : - bsc#1003565: crmd: Record pending operations in the CIB before they are performed - bsc#1000743: pengine: Do not fence a maintenance node if it shuts down cleanly - bsc#987348: ping: Avoid temporary files for fping check - bsc#986644: libcrmcommon: report errors consistently when waiting for data on connection - bsc#986644: remote: Correctly calculate the remaining timeouts when receiving messages This update was imported from the SUSE:SLE-12-SP2:Update update project.
    last seen 2018-09-02
    modified 2018-01-26
    plugin id 95531
    published 2016-12-05
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=95531
    title openSUSE Security Update : pacemaker (openSUSE-2016-1376)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20161104_PACEMAKER_ON_SL7_X.NASL
    description The following packages have been upgraded to a newer upstream version: pacemaker (1.1.15). Security Fix(es) : - It was found that the connection between a pacemaker cluster and a pacemaker_remote node could be shut down using a new unauthenticated connection. A remote attacker could use this flaw to cause a denial of service. (CVE-2016-7797) Additional Changes :
    last seen 2018-09-01
    modified 2018-01-26
    plugin id 95914
    published 2016-12-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=95914
    title Scientific Linux Security Update : pacemaker on SL7.x x86_64
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2016-1447.NASL
    description This update for pacemaker fixes the following issues : - remote: Allow cluster and remote LRM API versions to diverge (bsc#1009076) - libcrmcommon: fix CVE-2016-7035 (improper IPC guarding) (bsc#1007433) - sysconfig: minor tweaks (typo, wording) - spec: more robust check for systemd being in use - spec: defines instead of some globals + error suppression - various: issues discovered via valgrind and coverity - attrd_updater: fix usage of HAVE_ATOMIC_ATTRD - crmd: cl#5185 - Record pending operations in the CIB before they are performed (bsc#1003565) - ClusterMon: fix to avoid matching other process with the same PID - mcp: improve comments for sysconfig options - remove openssl-devel and libselinux-devel as build dependencies - tools: crm_standby --version/--help should work without cluster - libpengine: only log startup-fencing warning once - pacemaker.service: do not mistakenly suggest killing fenced - libcrmcommon: report errors consistently when waiting for data on connection (bsc#986644) - remote: Correctly calculate the remaining timeouts when receiving messages (bsc#986644) - libfencing: report added node ID correctly - crm_mon: Do not call setenv with null value - pengine: Do not fence a maintenance node if it shuts down cleanly (bsc#1000743) - ping: Avoid temporary files for fping check (bsc#987348) - all: clarify licensing and copyrights - crmd: Resend the shutdown request if the DC forgets - ping: Avoid temp files in fping_check (bsc#987348) - crmd: Ensure the R_SHUTDOWN is set whenever we ask the DC to shut us down - crmd: clear remote node operation history only when it comes up - libcib,libfencing,libtransition: handle memory allocation errors without CRM_CHECK() - tools: make crm_mon XML schema handle resources with multiple active - pengine: set OCF_RESKEY_CRM_meta_notify_active_* for multistate resources - pengine: avoid null dereference in new same-node ordering option - lrmd,libcluster: ensure g_hash_table_foreach() is never passed a null table - crmd: don't log warning if abort_unless_down() can't find down event - lib: Correction of the deletion of the notice registration. - stonithd: Correction of the wrong connection process name. - crmd: Keep a state of LRMD in the DC node latest. - pengine: avoid transition loop for start-then-stop + unfencing - libpengine: allow pe_order_same_node option for constraints - cts: Restart systemd-journald with 'systemctl restart systemd-journald.socket' (bsc#995365) - libcrmcommon: properly handle XML comments when comparing v2 patchset diffs - crmd: don't abort transitions for CIB comment changes - libcrmcommon: log XML comments correctly - libcrmcommon: remove extraneous format specifier from log message - remote: cl#5269 - Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767, CVE-2016-7797) This update was imported from the SUSE:SLE-12-SP1:Update update project.
    last seen 2018-09-02
    modified 2018-01-26
    plugin id 95753
    published 2016-12-13
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=95753
    title openSUSE Security Update : pacemaker (openSUSE-2016-1447)
redhat via4
advisories
bugzilla
id 1379784
title CVE-2016-7797 pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack
oval
AND
  • OR
    • comment Red Hat Enterprise Linux 7 Client is installed
      oval oval:com.redhat.rhsa:tst:20140675001
    • comment Red Hat Enterprise Linux 7 Server is installed
      oval oval:com.redhat.rhsa:tst:20140675002
    • comment Red Hat Enterprise Linux 7 Workstation is installed
      oval oval:com.redhat.rhsa:tst:20140675003
    • comment Red Hat Enterprise Linux 7 ComputeNode is installed
      oval oval:com.redhat.rhsa:tst:20140675004
  • OR
    • AND
      • comment pacemaker is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578007
      • comment pacemaker is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635006
    • AND
      • comment pacemaker-cli is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578015
      • comment pacemaker-cli is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635014
    • AND
      • comment pacemaker-cluster-libs is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578005
      • comment pacemaker-cluster-libs is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635016
    • AND
      • comment pacemaker-cts is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578011
      • comment pacemaker-cts is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635018
    • AND
      • comment pacemaker-doc is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578021
      • comment pacemaker-doc is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635012
    • AND
      • comment pacemaker-libs is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578017
      • comment pacemaker-libs is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635008
    • AND
      • comment pacemaker-libs-devel is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578009
      • comment pacemaker-libs-devel is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635010
    • AND
      • comment pacemaker-nagios-plugins-metadata is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578019
      • comment pacemaker-nagios-plugins-metadata is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20152383010
    • AND
      • comment pacemaker-remote is earlier than 0:1.1.15-11.el7
        oval oval:com.redhat.rhsa:tst:20162578013
      • comment pacemaker-remote is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20131635020
rhsa
id RHSA-2016:2578
released 2016-11-03
severity Moderate
title RHSA-2016:2578: pacemaker security, bug fix, and enhancement update (Moderate)
rpms
  • pacemaker-0:1.1.15-11.el7
  • pacemaker-cli-0:1.1.15-11.el7
  • pacemaker-cluster-libs-0:1.1.15-11.el7
  • pacemaker-cts-0:1.1.15-11.el7
  • pacemaker-doc-0:1.1.15-11.el7
  • pacemaker-libs-0:1.1.15-11.el7
  • pacemaker-libs-devel-0:1.1.15-11.el7
  • pacemaker-nagios-plugins-metadata-0:1.1.15-11.el7
  • pacemaker-remote-0:1.1.15-11.el7
refmap via4
bid 93261
confirm
mlist [oss-security] 20160930 Re: CVE request: pacemaker DoS when pacemaker remote is in use
suse
  • SUSE-SU-2016:2869
  • openSUSE-SU-2016:2965
  • openSUSE-SU-2016:3101
Last major update 28-03-2017 - 10:14
Published 24-03-2017 - 11:59
Back to Top