The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4318:03 advisory.

    * keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks     (CVE-2018-19044)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the keepalived package has been released.

According to the version of the keepalived package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - keepalived 2.0.8 didn't check for pathnames with     symlinks when writing data to a temporary file upon a     call to PrintData or PrintStats. This allowed local     users to overwrite arbitrary files if     fs.protected_symlinks is set to 0, as demonstrated by a     symlink from /tmp/keepalived.data or     /tmp/keepalived.stats to /etc/passwd.(CVE-2018-19044)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - keepalived 2.0.8 didn't check for pathnames with     symlinks when writing data to a temporary file upon a     call to PrintData or PrintStats. This allowed local     users to overwrite arbitrary files if     fs.protected_symlinks is set to 0, as demonstrated by a     symlink from /tmp/keepalived.data or     /tmp/keepalived.stats to /etc/passwd.(CVE-2018-19044)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has keepalived packages installed that are affected by a vulnerability:

  - keepalived 2.0.8 didn't check for pathnames with     symlinks when writing data to a temporary file upon a     call to PrintData or PrintStats. This allowed local     users to overwrite arbitrary files if     fs.protected_symlinks is set to 0, as demonstrated by a     symlink from /tmp/keepalived.data or     /tmp/keepalived.stats to /etc/passwd. (CVE-2018-19044)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for keepalived to version 2.0.10 fixes the following issues :

Security issues fixed (bsc#1015141) :

  - CVE-2018-19044: Fixed a check for pathnames with     symlinks when writing data to a temporary file upon a     call to PrintData or PrintStats

  - CVE-2018-19045: Fixed mode when creating new temporary     files upon a call to PrintData or PrintStats

  - CVE-2018-19046: Fixed a check for existing plain files     when writing data to a temporary file upon a call to     PrintData or PrintStats

Non-security issues fixed :

  - Replace references to /var/adm/fillup-templates with new     %_fillupdir macro (boo#1069468)

  - Use getaddrinfo instead of gethostbyname to workaround     glibc gethostbyname function buffer overflow     (bsc#949238)

For the full list of changes refer to:
http://www.keepalived.org/changelog.html

An update for keepalived is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es) :

* keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks (CVE-2018-19044)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
288886	MiracleLinux 7 : keepalived-1.3.5-16.el7 (AXSA:2019-4318:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	medium
126112	Photon OS 3.0: Keepalived PHSA-2019-3.0-0015	Nessus	PhotonOS Local Security Checks	2019/6/24	2025/8/22	medium
122916	Photon OS 2.0: Keepalived PHSA-2019-2.0-0134	Nessus	PhotonOS Local Security Checks	2019/3/18	2025/3/20	medium
122920	Photon OS 1.0: Keepalived PHSA-2019-1.0-0212	Nessus	PhotonOS Local Security Checks	2019/3/18	2025/3/20	medium
136264	EulerOS Virtualization for ARM 64 3.0.2.0 : keepalived (EulerOS-SA-2020-1561)	Nessus	Huawei Local Security Checks	2020/5/1	2025/2/21	medium
140890	EulerOS 2.0 SP3 : keepalived (EulerOS-SA-2020-2123)	Nessus	Huawei Local Security Checks	2020/9/28	2025/2/20	medium
132488	NewStart CGSL CORE 5.05 / MAIN 5.05 : keepalived Vulnerability (NS-SA-2019-0240)	Nessus	NewStart CGSL Local Security Checks	2019/12/31	2025/2/21	medium
123152	openSUSE Security Update : keepalived (openSUSE-2019-1008)	Nessus	SuSE Local Security Checks	2019/3/27	2024/6/12	high
128384	CentOS 7 : keepalived (CESA-2019:2285)	Nessus	CentOS Local Security Checks	2019/8/30	2025/2/24	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

high

medium