Linux Ha maintains a narrow portfolio of high-availability clustering and resource management components, primarily Heartbeat and OCF Resource Agents, that are widely deployed in mission-critical infrastructure for failover and service continuity. The vendor's vulnerability surface reflects the complexity of cluster coordination and resource orchestration logic, though the specific classes of recurring exposure are not yet clearly differentiated. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Linux Ha over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-1215HIGH Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain pac | Oct 28, 2002 | 10.0 | 27 | NO | NO |
CVE-2010-3389MEDIUM The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRAR | Oct 20, 2010 | 6.9 | 22 | NO | NO |
CVE-2015-1198HIGH Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5. | Aug 28, 2017 | 7.5 | 20 | NO | NO |
CVE-2007-4205HIGH XHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers to cause a denial of service (heartbeat control process crash) via a UDP packet to | Aug 8, 2007 | 7.1 | 19 | NO | NO |
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown v | Jul 25, 2006 | 2.1 | 18 | NO | YES |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Linux Ha.
Media articles that mention a CVE ID that affects a product developed by Linux Ha — matched by CVE ID, not by vendor name.