CVE-2018-19045

Опубликовано: 08 нояб. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.

Ссылки

https://bugzilla.suse.com/show_bug.cgi?id=1015141
Issue Tracking
Third Party Advisory
https://github.com/acassen/keepalived/commit/5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6
Patch
Third Party Advisory
https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067
Patch
Third Party Advisory
https://github.com/acassen/keepalived/issues/1048
Exploit
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201903-01
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1015141
Issue Tracking
Third Party Advisory
https://github.com/acassen/keepalived/commit/5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6
Patch
Third Party Advisory
https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067
Patch
Third Party Advisory
https://github.com/acassen/keepalived/issues/1048
Exploit
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201903-01
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:keepalived:keepalived:2.0.8:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.02377

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-19045

CVSS3: 7.5

ubuntu

почти 8 лет назад

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.

CVE-2018-19045

CVSS3: 7.1

redhat

почти 8 лет назад

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.

CVE-2018-19045

CVSS3: 7.5

debian

почти 8 лет назад

keepalived 2.0.8 used mode 0666 when creating new temporary files upon ...

GHSA-7gcf-2wg8-c4pq

CVSS3: 7.5

github

больше 4 лет назад

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.

BDU:2020-05694

CVSS3: 7.5

fstec

почти 8 лет назад

Уязвимость реализации вызовов PrintData или PrintStats системы балансировки сетевого трафика Keepalived, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 82%

0.02377

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200