{
  "cveId": "CVE-2018-16877",
  "url": "https://patchblox.com/security/cve/CVE-2018-16877",
  "summary": "CVE-2018-16877 is fixed in 23 products on 1 platform, first by libcib4 1.1.18-0ubuntu1.1, released April 16, 2019. It is not reported as exploited. Patch Radar priority: High.",
  "title": "pacemaker: The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity an...",
  "description": "The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. \n\nSecurity Fix(es):\n\n* pacemaker: Insufficient local IPC client-server authentication on the client\u0027s side can lead to local privesc (CVE-2018-16877)\n\n* pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS (CVE-2018-16878)\n\n* pacemaker: Information disclosure through use-after-free (CVE-2019-3885)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Interrupted live migration will get full start rather than completed migration (BZ#1695247)",
  "published": "2019-04-16T17:00:00Z",
  "severity": "Important",
  "cvss": 8.8,
  "epss": 0.00379,
  "epssPercentile": 0.32045,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libcib4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libcib4 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcib4-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmcluster4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libcrmcluster4 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcrmcluster4-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmcommon3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libcrmcommon3 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcrmcommon3-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmservice3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libcrmservice3 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcrmservice3-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "liblrmd1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "liblrmd1 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-liblrmd1-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpe-rules2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libpe-rules2 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpe-rules2-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpe-status10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libpe-status10 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpe-status10-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpengine10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libpengine10 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpengine10-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libstonithd2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libstonithd2 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libstonithd2-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtransitioner2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "libtransitioner2 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtransitioner2-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "pacemaker 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cli",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cli-utils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "pacemaker-cli-utils 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-cli-utils-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cluster-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cluster-libs",
      "release": "ol 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "ELSA-2019-1279",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-1279",
      "released": "2019-07-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "pacemaker-common 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-common-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cts",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-doc",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-libs",
      "release": "ol 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "ELSA-2019-1279",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-1279",
      "released": "2019-07-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-libs-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-nagios-plugins-metadata",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-remote",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-remote",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "pacemaker-remote 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-remote-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-resource-agents",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.1",
      "fix": "pacemaker-resource-agents 1.1.18-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-resource-agents-1.1.18-0ubuntu1.1",
      "released": "2019-04-16T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-schemas",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "RHSA-2019:1279",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-1279",
      "released": "2019-05-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-schemas",
      "release": "ol 8",
      "fixedVersion": "0:2.0.1-4.el8_0.3",
      "fix": "ELSA-2019-1279",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-1279",
      "released": "2019-07-30T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}