What is CVE-2019-10153?

CVE-2019-10153 is a medium-severity vulnerability in Clusterlabs Fence-agents, classified under CWE-172. CVSS score: 5.0/10. Published 2019-07-30.

How severe is CVE-2019-10153?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Vulnerability in Clusterlabs Fence-agents

CVE-2019-10153

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventi…

EPSS: 0.003 (57.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L.

Affected products

Clusterlabs Fence-agents — versions fixed in 4.3.4

Weakness classification (CWE)

CWE-172

References

bugzilla.redhat.com/show_bug.cgi (x_refsource_CONFIRM)
github.com/ClusterLabs/fence-agents/pull/255 (x_refsource_CONFIRM)
github.com/ClusterLabs/fence-agents/pull/272 (x_refsource_CONFIRM)
RHSA-2019:2037 (vendor-advisory, x_refsource_REDHAT)

Frequently asked questions

What is CVE-2019-10153?: CVE-2019-10153 is a medium-severity vulnerability in Clusterlabs Fence-agents, classified under CWE-172. CVSS score: 5.0/10. Published 2019-07-30.
How severe is CVE-2019-10153?: Medium severity. CVSS v3 base score is 5.0 out of 10.