CVE-2019-10153 - CVE House
Back to Database
Status published Medium CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4,...

Vulnerability Description

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10153

Credits & Attribution

No credits recorded in the NVD database.

References

More from ClusterLabs

View All →
CVE-2019-3885
A use-after-free flaw was found in pacemaker up to and...
Low 3.3
CVE-2018-16878
A flaw was found in pacemaker up to and including...
Medium 6.2
CVE-2018-16877
A flaw was found in the way pacemaker's client-server authentication...
High 8.8
CVE-2017-2661
ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site...
Medium 6.1
CVE-2016-7035
An authorization flaw was found in Pacemaker before 1.1.16, where...
High 8.8

Affected Vendor

ClusterLabs

View all reports →

Affected Software

fence-agents
Vulnerable Versions:
fixed in 4.3.4

Timeline

Official Publish: July 30th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Weaknesses (CWE)

CWE-172

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.