What’s Vulnerable › Vulnerabilities

CVE-2018-19045

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-11-08 · updated 2026-06-17
• Weakness: CWE-200

Description

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.

Affected products

• Keepalived: 2.0.8

References

• https://bugzilla.suse.com/show_bug.cgi?id=1015141
• https://github.com/acassen/keepalived/commit/5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6
• https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067
• https://github.com/acassen/keepalived/issues/1048
• https://security.gentoo.org/glsa/201903-01
• https://bugzilla.suse.com/show_bug.cgi?id=1015141
• https://github.com/acassen/keepalived/commit/5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6
• https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067
• https://github.com/acassen/keepalived/issues/1048
• https://security.gentoo.org/glsa/201903-01

Get alerted when CVE-2018-19045 or the next vulnerability affects your stack