CVE-2018-19046 Details
Description
keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats. If a local attacker had previously created a file with the expected name (e.g., /tmp/keepalived.data or /tmp/keepalived.stats), with read access for the attacker and write access for the keepalived process, then this potentially leaked sensitive information.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://bugzilla.suse.com/show_bug.cgi?id=1015141 | CVE | Issue TrackingThird Party Advisory |
| https://github.com/acassen/keepalived/issues/1048 | CVE | PatchThird Party Advisory |
| https://security.gentoo.org/glsa/201903-01 | CVE | Third Party Advisory |
| https://bugzilla.suse.com/show_bug.cgi?id=1015141 | [email protected] | Issue TrackingThird Party Advisory |
| https://github.com/acassen/keepalived/issues/1048 | [email protected] | PatchThird Party Advisory |
| https://security.gentoo.org/glsa/201903-01 | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| keepalived keepalived | 2.0.8 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 13, 2019 | Modified Analysis | [email protected] |
| Mar 10, 2019 | CVE Modified | [email protected] |
| Jan 10, 2019 | Initial Analysis | [email protected] |