5
CVE-2019-10153
- EPSS 0.49%
- Published 30.07.2019 23:15:11
- Last modified 21.11.2024 04:18:31
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.
Data is provided by the National Vulnerability Database (NVD)
Clusterlabs ≫ Fence-agents Version < 4.3.4
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Server Version7.0
Redhat ≫ Enterprise Linux Workstation Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.645 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 3.1 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
| secalert@redhat.com | 5 | 3.1 | 1.4 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
|
CWE-172 Encoding Error
The product does not properly encode or decode the data, resulting in unexpected values.