CVE-2019-10153CWE-172

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm…

Medium · published July 30, 2019

CVSS v3.0
5.0
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.

The record
Technical detail
CVSS v3.0
5.0 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02171 · 82.0th percentile
Weakness
CWE-172 · Encoding Error
Published
2019-07-30T22:10Z
EPSS history
Timeline
  • 30 JUL 22:10Z
    A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm…
    cvelistv5