Lucene search
Veracode Vulnerability DatabaseVERACODE:21084HistoryAug 08, 2019 - 12:07 a.m.
Arbitrary File Overwrite
2019-08-0800:07:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.0004 Low
EPSS
Percentile
5.1%
keepalived is vulnerable to arbitrary file overwrite. The vulnerability exists as there is an improper pathname validation that allows for overwrite of arbitrary filenames via symlinks.
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
access.redhat.com/errata/RHSA-2019:2285
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1667292
bugzilla.suse.com/show_bug.cgi?id=1015141
github.com/acassen/keepalived/commit/04f2d32871bb3b11d7dc024039952f2fe2750306
github.com/acassen/keepalived/issues/1048
security.gentoo.org/glsa/201903-01
Related
nessus
nessus
Amazon Linux AMI : keepalived (ALAS-2020-1414)
2020-08-13 00:00:00
RHEL 7 : keepalived (RHSA-2019:2285)
2019-08-12 00:00:00
ubuntucve
ubuntucve
CVE-2018-19044
2018-11-08 00:00:00
cve
cve
CVE-2018-19044
2018-11-08 20:29:00
osv
osv
CVE-2018-19044
2018-11-08 20:29:00
openvas
openvas
Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2020-2123)
2020-09-29 00:00:00
Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2020-1157)
2020-02-25 00:00:00
Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2020-1561)
2020-04-30 00:00:00
nvd
nvd
CVE-2018-19044
2018-11-08 20:29:00
redhat
redhat
(RHSA-2019:2285) Moderate: keepalived security and bug fix update
2019-08-06 08:21:21
debiancve
debiancve
CVE-2018-19044
2018-11-08 20:29:00
oraclelinux
oraclelinux
keepalived security and bug fix update
2019-08-13 00:00:00
centos
centos
keepalived security update
2019-08-30 03:09:17
amazon
amazon
Medium: keepalived
2020-08-10 22:53:00
Medium: keepalived
2019-10-21 18:01:00
cvelist
cvelist
CVE-2018-19044
2018-11-08 20:00:00
redhatcve
redhatcve
CVE-2018-19044
2018-11-21 05:50:30
alpinelinux
alpinelinux
CVE-2018-19044
2018-11-08 20:29:00
prion
prion
Code injection
2018-11-08 20:29:00
suse
suse
Security update for keepalived (moderate)
2018-12-21 12:08:57
Security update for keepalived (moderate)
2018-12-21 12:09:48
gentoo
gentoo
Keepalived: Multiple vulnerabilities
2019-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: keepalived-2.0.10-1.fc29
2018-12-11 02:43:12
mageia
mageia
Updated keepalived package fixes security vulnerabilities
2018-12-30 02:24:32
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0134
2019-02-25 00:00:00
Important Photon OS Security Update - PHSA-2019-0134
2019-02-25 00:00:00
Critical Photon OS Security Update - PHSA-2019-0015
2019-05-28 00:00:00