CVE-2008-6560: Red Hat Cman

High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.

Affected products

• Red Hat Cman: up to and including 2.03.08-1; version 2.03.03-1 only; version 2.03.04-1 only; version 2.03.05-1 only; version 2.03.07-1 only

Published 2009-03-31. Last modified 2026-06-16.