CVE-2018-19045

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-19045
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19045.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-19045
Downstream
Related
Published
2018-11-08T20:29:00.400Z
Modified
2026-07-08T19:44:46.697435Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information.

References

Affected packages

Git / github.com/acassen/keepalived

Affected ranges

Type
GIT
Repo
https://github.com/acassen/keepalived
Events
Introduced
dc3ed1e1e19f02f91edebe4dd1a5f6ec9daf0545
Last affected
dc3ed1e1e19f02f91edebe4dd1a5f6ec9daf0545
Fixed
5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6
Fixed
c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067
Database specific 
{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:keepalived:keepalived:2.0.8:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.0.8"
        },
        {
            "last_affected": "2.0.8"
        }
    ]
}

Affected versions

2.*
2.0.8
v2.*
v2.0.8

Database specific

vanir_signatures_modified 
"2026-07-08T19:44:46Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19045.json"
vanir_signatures 
[
    {
        "id": "CVE-2018-19045-1ef65f9b",
        "digest": {
            "line_hashes": [
                "26017253262315803378378951811426234307",
                "75132600348556400968587920543937247457",
                "128868493884766834486833743222547658832",
                "225842921478013771255303888945509610435"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/acassen/keepalived/commit/5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6",
        "deprecated": false,
        "target": {
            "file": "keepalived/core/main.c"
        }
    },
    {
        "id": "CVE-2018-19045-48f3fca4",
        "digest": {
            "function_hash": "60477812192732439740516237796944835997",
            "length": 6808.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "function": "keepalived_main",
            "file": "keepalived/core/main.c"
        }
    },
    {
        "id": "CVE-2018-19045-51eb25c7",
        "digest": {
            "function_hash": "7210393847595224794344478825563831203",
            "length": 313.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/acassen/keepalived/commit/5241e4d7b177d0b6f073cfc9ed5444bf51ec89d6",
        "deprecated": false,
        "target": {
            "function": "set_umask",
            "file": "keepalived/core/main.c"
        }
    },
    {
        "id": "CVE-2018-19045-63a1da3e",
        "digest": {
            "line_hashes": [
                "89475281224429177671741118572197895203",
                "141945543267540484252221464271830210627",
                "28492755883219318516137475546377272865",
                "311529301410245229763942551666729578845",
                "322861366766076202819845852002123082161",
                "170982395042636036182516454298688762509",
                "3554810321911829373602647490293231115",
                "210041612259406780417780878290612835682",
                "212131085408833042944605381744396300326"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "file": "keepalived/core/global_parser.c"
        }
    },
    {
        "id": "CVE-2018-19045-790cd4f1",
        "digest": {
            "line_hashes": [
                "122246403363602856218140696631649999777",
                "261817189880649701437811532212085169022",
                "109042160624647117163026329908142481026",
                "34864197991096667696188941826688822734",
                "41185989976096070873219517513467631034",
                "279202142582429280557072832445558142428",
                "169841172998122692370049434385533573510",
                "271345767433871327967417085443529596116",
                "23630686564716392967255023458343910200",
                "183627434301962833008753632654790815066",
                "330112055593031457786399392759835511650",
                "154228111271388678773931958665145966976",
                "286709704614801790751589198939483465898",
                "307857833223423337179225113237005202042",
                "270544067154960670753753007438310170489",
                "189107002617790146991357647089629744360",
                "270990646696309879519928106288885168081",
                "214071654134279382709967690301370863814",
                "183858561382764012579551599858593637910",
                "12761806643551718106126236527133600873",
                "319171447280061693091912665107618295057",
                "20472268543458720451132726661463625447",
                "116568246487073662073959558652060982535",
                "121101664942403370004635759365195985905",
                "298071544371825695470861821083989222213",
                "206611610124293567291229596081846429625",
                "13684618404874196461213271603992019224",
                "24451081388059328782217525034676413247",
                "313981868738148857234696174919524227817",
                "313830957163357751325927775668952239580",
                "229363600428019704125935520932715133221",
                "21607055351266884924145880680805407577",
                "184420280954040414869843084137526302041",
                "247885465098904893329082277884858365317",
                "222687966320278014537904929821532837038",
                "37189981295852490816554151566130433729",
                "224360657772925766751852100705672602927",
                "109435608149983104920134832156797613023",
                "23222382399200900205534702548810722651",
                "226350641778331213748279523165722713467",
                "43003450584514283016579238063997127034"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "file": "keepalived/core/main.c"
        }
    },
    {
        "id": "CVE-2018-19045-a350a0a5",
        "digest": {
            "function_hash": "253189801050755831469685046817631964963",
            "length": 11405.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "function": "dump_global_data",
            "file": "keepalived/core/global_data.c"
        }
    },
    {
        "id": "CVE-2018-19045-ad3ee6f7",
        "digest": {
            "line_hashes": [
                "115993456534699753105835372719280520515",
                "215383066668614989919288220004578046985",
                "161057594907425301382494101764736548636",
                "244708351257279300474207984398961984547"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "file": "keepalived/include/global_data.h"
        }
    },
    {
        "id": "CVE-2018-19045-b18659ea",
        "digest": {
            "function_hash": "310387808491883105455550325169921927762",
            "length": 8169.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "function": "parse_cmdline",
            "file": "keepalived/core/main.c"
        }
    },
    {
        "id": "CVE-2018-19045-b3d80d98",
        "digest": {
            "line_hashes": [
                "337653497298110666580202985004429089358",
                "170704596997147332243057019706677328605"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "file": "keepalived/include/main.h"
        }
    },
    {
        "id": "CVE-2018-19045-c47a62cc",
        "digest": {
            "function_hash": "77971988854969989463001220473955821334",
            "length": 5374.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "function": "usage",
            "file": "keepalived/core/main.c"
        }
    },
    {
        "id": "CVE-2018-19045-d558c765",
        "digest": {
            "function_hash": "101785376052936907033871900403712001948",
            "length": 6202.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "function": "init_global_keywords",
            "file": "keepalived/core/global_parser.c"
        }
    },
    {
        "id": "CVE-2018-19045-fcad905e",
        "digest": {
            "line_hashes": [
                "30660773896102251192845796366333662861",
                "31907802267868088606451189360931956773",
                "292768228736455442841686553396999304156"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/acassen/keepalived/commit/c6247a9ef2c7b33244ab1d3aa5d629ec49f0a067",
        "deprecated": false,
        "target": {
            "file": "keepalived/core/global_data.c"
        }
    }
]