Lucene search
Veracode Vulnerability DatabaseVERACODE:33245HistoryDec 10, 2021 - 3:59 p.m.
Access Control Bypass
2021-12-1015:59:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
access control
bypass
keepalived
sanitization
message destination
user
inspect
manipulate
property
vulnerability
software
EPSS
0.001
Percentile
47.3%
keepalived is vulberable to access control bypass. The vulnerability exists due to the lack of sanitization of the message destination, allowing any user to inspect and manipulate any property.
References
github.com/acassen/keepalived/commit/7977fec0be89ae6fe87405b3f8da2f0b5e415e3d
github.com/acassen/keepalived/pull/2063
lists.fedoraproject.org/archives/list/[email protected]/message/5226RYNMNB7FL4MSJDIBBGPUWH6LMRYV/
lists.fedoraproject.org/archives/list/[email protected]/message/6O2R6EXURJQFPFPYFWRCZLUYVWQCLSZM/
security-tracker.debian.org/tracker/CVE-2021-44225
Related
ubuntucve
ubuntucve
CVE-2021-44225
2021-11-26 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-44225 affecting package keepalived 2.0.10-7
2022-01-10 03:59:19
CVE-2021-44225 affecting package keepalived for versions less than 2.2.7-1
2022-04-09 06:51:49
nessus
nessus
EulerOS Virtualization 2.10.0 : keepalived (EulerOS-SA-2022-1401)
2022-04-18 00:00:00
Photon OS 3.0: Keepalived PHSA-2022-3.0-0348
2022-01-10 00:00:00
Debian DLA-3388-1 : keepalived - LTS security update
2023-04-10 00:00:00
rocky
rocky
keepalived security and bug fix update
2022-05-10 06:39:24
openvas
openvas
Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2022-1734)
2022-05-25 00:00:00
Mageia: Security Advisory (MGASA-2021-0567)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2022-1474)
2022-04-20 00:00:00
amazon
amazon
Medium: keepalived
2023-07-20 17:29:00
debiancve
debiancve
CVE-2021-44225
2021-11-26 00:15:10
redhatcve
redhatcve
CVE-2021-44225
2021-11-29 03:54:19
osv
osv
keepalived - security update
2023-04-10 00:00:00
CVE-2021-44225
2021-11-26 00:15:10
keepalived-2.2.7-1.1 on GA media
2024-06-15 00:00:00
almalinux
almalinux
Moderate: keepalived security and bug fix update
2022-05-10 06:39:24
cve
cve
CVE-2021-44225
2021-11-26 00:15:10
alpinelinux
alpinelinux
CVE-2021-44225
2021-11-26 00:15:10
prion
prion
Design/Logic Flaw
2021-11-26 00:15:00
mageia
mageia
Updated keepalived packages fix security vulnerability
2021-12-19 15:26:08
suse
suse
Security update for keepalived (important)
2022-09-09 00:00:00
Security update for keepalived (important)
2022-08-26 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: keepalived-2.2.4-2.fc35
2021-12-23 00:39:58
[SECURITY] Fedora 34 Update: keepalived-2.2.4-2.fc34
2021-12-23 01:25:30
oraclelinux
oraclelinux
keepalived security and bug fix update
2022-05-17 00:00:00
redhat
redhat
debian
debian
[SECURITY] [DLA 3388-1] keepalived security update
2023-04-10 18:09:58
ubuntu
ubuntu
Keepalived vulnerability
2021-12-13 00:00:00
nvd
nvd
CVE-2021-44225
2021-11-26 00:15:10
cvelist
cvelist
CVE-2021-44225
2021-11-26 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0348
2022-01-06 00:00:00
Moderate Photon OS Security Update - PHSA-2023-4.0-0321
2023-01-24 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0348
2022-01-06 00:00:00