PT-2018-3575 · Keepalived+4 · Keepalived+4

Jsegitz · Published 2018-10-25 · Updated 2024-06-15 · CVE-2018-19044

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:L/AC:H/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions keepalived versions 2.0.8

Description The issue is related to the implementation of PrintData or PrintStats calls in the Keepalived network traffic balancing system, which is associated with incorrect link resolution before accessing a file. This could allow an attacker to overwrite arbitrary files. Local users can exploit this to overwrite files if fs.protected symlinks is set to 0, for example, by creating a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Recommendations For keepalived version 2.0.8, consider setting fs.protected symlinks to 1 to prevent exploitation, and avoid using symlinks in temporary file paths for PrintData or PrintStats calls until a patch is available.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2018-2627

BDU:2020-05693

CESA-2019_2285

CVE-2018-19044

MGASA-2018-0494

OPENSUSE-SU-2018_4212-1

OPENSUSE-SU-2024:10893-1

RHSA-2019:2285

RHSA-2019_2285

SUSE-SU-2020:0779-1

SUSE-SU-2020_0779-1

Affected Products

Alt Linux

Centos

Red Hat

Suse

Keepalived

References · 30

• 🔥 https://github.com/acassen/keepalived/issues/1048 · Exploit
• https://github.com/acassen/keepalived/commit/04f2d32871bb3b11d7dc024039952f2fe2750306 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19044 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19044 · Security Note
• https://security.gentoo.org/glsa/201903-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-19044 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0779-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2019-2285.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/6YQ7NS6S7B7V2X5NEUJKMTNXL3YPD7H3 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0494 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10893-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19044 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19044 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2285 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05693 · Security Note