Every CVESearch/Get API key

CVE-2011-1784

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666...

3.6 LowFix available

CVE-2011-1784 is a low vulnerability (CVSS 3.6) in Keepalived, published May 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in keepalived 1:1.2.2-2.

What does this mean?
Severity
3.6 LowCVSS 2.0, NVD
Exploit chance
0.37%EPSS, 31st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1:1.2.2-2keepalived +2 more

Description

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Exploit likelihood

0.37%Down 0.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
keepalived
Debian:12
before 1:1.2.2-2
1:1.2.2-2
keepalived
Debian:13
before 1:1.2.2-2
1:1.2.2-2
keepalived
Debian:14
before 1:1.2.2-2
1:1.2.2-2

What each source reports

NVD Score used3.6

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
CVE-2011-1784
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
CVE-2011-1784
Updated
2026-11-02
EUVDEUVD-2011-1782No score

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
EUVD-2011-1782
Updated
2026-11-03
GitHub AdvisoriesGHSA-xjrv-p75r-gqqrNo score

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666...

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
GHSA-xjrv-p75r-gqqr
Updated
2026-11-02
OSVNo score

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
CVE-2011-1784
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1784No score

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
DEBIAN-CVE-2011-1784
Updated
2026-11-02
OSVUBUNTU-CVE-2011-1784No score

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Record
UBUNTU-CVE-2011-1784
Updated
2026-11-02

History

History
RecordedChangedSources
facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 10 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open