Summary
It was discovered that Keepalived incorrectly handled certain messages.
An attacker could possibly use this issue to access-control bypass.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | keepalived | 1:1.3.9-1ubuntu0.18.04.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | keepalived | 1:2.0.19-2ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user…
References
-
report
https://ubuntu.com/security/CVE-2021-44225