Vulnerabilities > Keepalived > Keepalived > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-11-26 | CVE-2021-44225 | In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. | 5.4 |
2018-11-08 | CVE-2018-19046 | Information Exposure vulnerability in Keepalived 2.0.8 keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. | 4.7 |
2018-11-08 | CVE-2018-19044 | Link Following vulnerability in Keepalived 2.0.8 keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. | 4.7 |