What is the CVSS score of CVE-2019-10153?

CVE-2019-10153 has a CVSS 3.1 base score of 5.0 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L. EPSS exploitation probability: 2.2%.

Is there a patch available for CVE-2019-10153?

Yes, a patch is available for CVE-2019-10153. Update the affected software to the latest version immediately.

Fence Agents CVE-2019-10153

MEDIUM

Encoding Error (CWE-172)

2019-07-30 secalert@redhat.com

Information Disclosure Fence Agents Enterprise Linux Enterprise Linux Server Enterprise Linux Workstation

5.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

CVE Published

Jul 30, 2019 - 23:15 nvd

MEDIUM 5.0

DescriptionNVD

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.

AnalysisAI

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-172. A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member. Affected products include: Clusterlabs Fence-Agents, Redhat Enterprise Linux, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation. Version information: version 4.3.4.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.