Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-19046
Description:keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. If a local attacker had previously created a file with the expected name (e.g., /tmp/keepalived.data or /tmp/keepalived.stats), with read access for the attacker and write access for the keepalived process, then this potentially leaked sensitive information.
Test IDs: 1.3.6.1.4.1.25623.1.1.2.2021.2139   1.3.6.1.4.1.25623.1.1.2.2020.1919   1.3.6.1.4.1.25623.1.1.2.2020.1291   1.3.6.1.4.1.25623.1.1.2.2020.2445   1.3.6.1.4.1.25623.1.1.2.2020.1973  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-19046
https://security.gentoo.org/glsa/201903-01
https://bugzilla.suse.com/show_bug.cgi?id=1015141
https://github.com/acassen/keepalived/issues/1048




© 1998-2025 E-Soft Inc. All rights reserved.