fence-agents CVE-2019-10153 Remote Denial of Service Vulnerability

Bugtraq ID:	108563
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-10153
Remote:	Yes
Local:	No
Published:	Jun 03 2019 12:00AM
Updated:	Jun 03 2019 12:00AM
Credit:	Sandro Emma (Deutsche Börse AG) and Jens Kühnel (Deutsche Börse AG)
Vulnerable:	Redhat Enterprise Linux 8 Redhat Enterprise Linux 7 ClusterLabs fence-agents 4.3.3 ClusterLabs fence-agents 4.3 ClusterLabs fence-agents 4.0 ClusterLabs fence-agents 3.1
Not Vulnerable:	ClusterLabs fence-agents 4.3.4

fence-agents CVE-2019-10153 Remote Denial of Service Vulnerability

fence-agents is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

Versions prior to fence-agents 4.3.4 are vulnerable.

fence-agents CVE-2019-10153 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

fence-agents CVE-2019-10153 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

fence-agents CVE-2019-10153 Remote Denial of Service Vulnerability

References:

• fence-agents Homepage (Github)
  
• fence_rhevm: Changed Encoding to UTF-8 #255 (Github)
  
• fence_rhevm: fix debug encoding issues #272 (Github)
  
• Bug 1716286 CVE-2019-10153 fence-agents: mis-handling of non-ASCII characters (Redhat)
  
• CVE-2019-10153 (Redhat)