CVE:CVE-2016-7035
CNNVD:CNNVD-201611-330
Pacemaker是一款集群资源管理器，它可通过首选集群基础设施（OpenAIS或Heartbeat）提供故障检测、群集服务等功能。
Pacemaker 1.1.16之前版本中存在提权漏洞，该漏洞源于程序没有正确的保护IPC界面。本地攻击者可利用该漏洞使Local Resource Manager守护进程以root权限执行脚本，进而在设备上获取root权限。
solution:Upgrade clusterlabs pacemaker to a higher version than 1.1.16,and avoid the version (,1.1.16]; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.3,7.4,7.5,7.6,and avoid the version 7.3,7.4,7.5,7.6