Code injection

2011-05-2022:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

CPENameOperatorVersion
keepalivedeq0.6.9
keepalivedeq0.7.1
keepalivedeq0.3.6
keepalivedeq1.1.5
keepalivedeq1.1.13
keepalivedeq1.1.3
keepalivedeq1.0.1
keepalivedeq0.6.1
keepalivedeq1.1.11
keepalivedeq0.6.5

Name	Operator	Version
keepalived	eq	0.6.9
keepalived	eq	0.7.1
keepalived	eq	0.3.6
keepalived	eq	1.1.5
keepalived	eq	1.1.13
keepalived	eq	1.1.3
keepalived	eq	1.0.1
keepalived	eq	0.6.1
keepalived	eq	1.1.11
keepalived	eq	0.6.5