CVE-2013-0281: Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enable...

Security readout for executives and security teams

This vulnerability can let a remote attacker make Pacemaker cluster management connections hang when remote CIB configuration or resource management is enabled. The likely business impact is availability disruption in high-availability clusters, not data theft or direct system takeover based on the supplied sources. Exposure is most likely in older Pacemaker 1.1.10 high-availability clusters where remote CIB configuration or remote resource management is enabled and reachable over the network. Treat this as a targeted availability risk for legacy HA infrastructure. Prioritize systems supporting critical services, especially if cluster management is network-reachable beyond trusted administrators. Mitigation focus: Check RHSA-2013:1635 and ClusterLabs guidance for applicable fixed packages or commits.; Apply vendor-supported Pacemaker updates where they apply to affected systems.; Disable remote CIB configuration or resource management where it is not required..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.