CVEvulnerability

CVE-2019-10153

5.0 MEDIUM Published 2019-07-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.0 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS 3.0 ([email protected])
5.0 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-172

Description

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.

Affected configurations

• clusterlabs fence-agents (< 4.3.4) • redhat enterprise linux 8.0 • redhat enterprise linux server 7.0 • redhat enterprise linux workstation 7.0

Related

Weakness · CWE (1)

  • CWE-172 Improper Encoding or Decoding of Data weakness

References