CVE-2018-19115

high-risk

Published 2018-11-08

keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap.

Do I need to act?

6.2% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Fix available

Upgrade to: c9e2da7a14513ae7979854afe57cd4cb0d1a3092

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (7)

Keepalived

Debian Linux

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Affected Vendors

Debian Redhat Keepalived

References (20)

Third Party Advisory https://access.redhat.com/errata/RHSA-2019:0022

https://access.redhat.com/errata/RHSA-2019:1792

https://access.redhat.com/errata/RHSA-2019:1945

Issue Tracking https://bugzilla.suse.com/show_bug.cgi?id=1015141

Patch https://github.com/acassen/keepalived/pull/961

Patch https://github.com/acassen/keepalived/pull/961/commits/f28015671a4b04785859d1b4b...

Mailing List https://lists.debian.org/debian-lts-announce/2018/11/msg00034.html

Third Party Advisory https://security.gentoo.org/glsa/201903-01

https://usn.ubuntu.com/3995-1/

https://usn.ubuntu.com/3995-2/