Every CVE Search/ Get API key

CVE-2018-19044

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file...

4.7 MediumFix available

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.50%Down 0.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 4.7

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
CVE-2018-19044
CVSS 3.0
4.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
CVE-2018-19044
Updated
2026-11-02
EUVDEUVD-2018-10762 No score

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
EUVD-2018-10762
Updated
2026-11-03
GitHub AdvisoriesGHSA-2357-m5j6-6jv3 4.7

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file...

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
GHSA-2357-m5j6-6jv3
CVSS 3.0
4.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
OSV 4.7

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
CVE-2018-19044
CVSS 3.0
4.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-19044 4.7

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
DEBIAN-CVE-2018-19044
CVSS 3.0
4.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2019:2285 7.0

Red Hat Security Advisory: keepalived security and bug fix update

Record
RHSA-2019:2285
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-19044 4.7

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd.

Record
UBUNTU-CVE-2018-19044
CVSS 3.0
4.7 MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVMGASA-2018-0494 No score

Updated keepalived package fixes security vulnerabilities

keepalived before version 2.0.9 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protected_symlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or /tmp/keepalived.stats to /etc/passwd (CVE-2018-19044).

keepalived before version 2.0.9 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information (CVE-2018-19045).

keepalived before version 2.0.10 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. If a local attacker had previously created a file with the expected name (e.g., /tmp/keepalived.data or /tmp/keepalived.stats), with read access for the attacker and write access for the keepalived process, then this potentially leaked sensitive information (CVE-2018-19046).

keepalived before version 2.0.9 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap (CVE-2018-19115).

Record
MGASA-2018-0494
Updated
2026-11-02
OSVopenSUSE-SU-2024:10893-1 No score

keepalived-2.2.2-4.2 on GA media

These are all security issues fixed in the keepalived-2.2.2-4.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10893-1
Updated
2026-11-02
OSVSUSE-SU-2020:0779-1 No score

Security update for keepalived

This update for keepalived fixes the following issues:

Initial release of keepalived v2.0.19 as supported package. (bsc#1158280, jsc#ECO-223)

Record
SUSE-SU-2020:0779-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
keepalived
Debian:12
 before 1:2.0.10-1
1:2.0.10-1
keepalived
Debian:13
 before 1:2.0.10-1
1:2.0.10-1
keepalived
Debian:14
 before 1:2.0.10-1
1:2.0.10-1
keepalived
Mageia:6
 before 2.0.10-1.mga6
2.0.10-1.mga6
keepalived
Red Hat:enterprise_linux:7::server
 before 0:1.3.5-16.el7
0:1.3.5-16.el7
keepalived-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.3.5-16.el7
0:1.3.5-16.el7
keepalived
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5-16.el7
0:1.3.5-16.el7
keepalived-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.3.5-16.el7
0:1.3.5-16.el7
keepalived
SUSE:Linux Enterprise High Availability Extension 15 SP1
 before 2.0.19-3.3.1
2.0.19-3.3.1
keepalived
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:1.3.2-1build11:1.3.9-11:1.3.9-1build11:1.3.9-1ubuntu0.18.04.11:1.3.9-1ubuntu0.18.04.21:1.3.9-1ubuntu0.18.04.3
 None known
keepalived
openSUSE:Tumbleweed
 before 2.2.2-4.2
2.2.2-4.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-19044 is a medium vulnerability (CVSS 4.7) in Keepalived, published November 8, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in keepalived 1:2.0.10-1.

References

Show 21 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open