CVE-2019-10153
Medium
Description
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Clusterlabs Fence-agents
PublishedJul 30, 2019
First seenJul 30, 2019
Weakness typeCWE-172CWE-172
How to fix
Update
- clusterlabs fence-agents4.3.4 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clusterlabs fence-agents | v < 4.3.4 | 4.3.4 |
| redhat enterprise_linux | 8.0 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_workstation | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.