GHSA-99xx-83jm-h24m · Severity: high · Ecosystem: pip — ClusterLabs crmsh vulnerable to shell code injection
An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
Conclusion & alert: CVE-2020-35459 is rated Exploit Available (51/100): CVSS High severity, with low exploitation likelihood (EPSS 0.04%). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
| EDB-ID | Source | Kind | Published | Link |
|---|---|---|---|---|
| — | nvd_ref | exploit_tag | Exploit-DB ↗ |
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2025-11-21 | 0.06% | 0.04% | -0.01% |
| 2 | 2025-11-18 | 0.04% | 0.06% | +0.01% |
| 3 | 2025-05-15 | — | 0.04% | — |
Full EPSS history (9 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 7.8 | 3.1 | HIGH |
|
1.8 | 5.9 | [email protected] |
| 7.2 | 2.0 | HIGH |
|
3.9 | 10.0 | [email protected] |
GHSA-99xx-83jm-h24m · Severity: high · Ecosystem: pip — ClusterLabs crmsh vulnerable to shell code injection
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2020-35459 not yet assigned priority: Debian including 1 source packages (crmsh), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. | https://security-tracker.debian.org/tracker/CVE-2020-35459 |
suse
|
high | — | https://www.suse.com/security/cve/CVE-2020-35459/ |
ubuntu
|
low | CVE-2020-35459 low priority: Ubuntu including 1 source packages (crmsh), 16 status rows across 16 suites (bionic, focal, groovy, hirsute, impish, jammy, kinetic, lunar, mantic, noble, oracular, plucky, questing, trusty, upstream, xenial): released 7, ignored 5, needed 2, needs-triage 1, not-affected 1. | https://ubuntu.com/security/CVE-2020-35459 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| clusterlabs | crmsh | <= 4.2.1 | cpe:2.3:a:clusterlabs:crmsh:*:*:*:*:*:*:*:* |
| debian | debian_linux | 9.0 | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| URL | Tags |
|---|---|
| http://www.openwall.com/lists/oss-security/2021/01/12/3 | Mailing List Patch Third Party Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=1179999 | Issue Tracking Third Party Advisory |
| https://github.com/ClusterLabs/crmsh/blob/a403aa15f3ea575adfe5e43bf2a31c9f9094fcda/crmsh/history.py#L476 | Patch Third Party Advisory |
| https://github.com/ClusterLabs/crmsh/releases | Release Notes Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/01/msg00021.html | Mailing List Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2021/01/12/3 | Exploit Mailing List Third Party Advisory |