CVE-2023-2319 It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to includ

What is CVE-2023-2319?

CVE-2023-2319 is a critical vulnerability in pcs, published on 17 May 2023.

Official description

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.

Which versions are affected by CVE-2023-2319?

It affects 3 products.

Products include Clusterlabs Pcs, Redhat Enterprise Linux High Availability, Redhat Enterprise Linux High Availability Eus.

How do I fix CVE-2023-2319?

Upgrade to a fixed version.

Is CVE-2023-2319 being exploited?

There is no known exploitation of CVE-2023-2319 in the wild and no public exploit code.

Other vulnerabilities in pcs

• CVE-2022-1049 Auth bypass in clusterlabs/pcs High 8.8
• CVE-2016-0720 Cross-site request forgery in n/a High 8.8
• CVE-2016-0721 Other in n/a High 8.1
• CVE-2022-2735 Privilege escalation in ClusterLabs/pcs High 7.8
• CVE-2017-2661 Cross-site scripting in pcs Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6rhm-fw89-rh2q.