Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Mageia 8: MGASA-2021-0567 Moderate: Keepalived D-Bus Access Control Bypass

mageia
Calendar Grey December 19, 2021
Dist Mageia Esm H88
Keepalived has been updated with a security fix that resolves access control bypass vulnerabilities in Mageia 8. For further details, refer to MGASA-2021-0567.
In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property

Summary

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property (CVE-2021-44225).

References

- https://bugs.mageia.org/show_bug.cgi?id=29769

- https://www.keepalived.org/release-notes/Release-2.2.0.html

- https://www.keepalived.org/release-notes/Release-2.2.1.html

- https://www.keepalived.org/release-notes/Release-2.2.2.html

- https://www.keepalived.org/release-notes/Release-2.2.3.html

- https://www.keepalived.org/release-notes/Release-2.2.4.html

- https://www.cve.org/CVERecord?id=CVE-2021-44225

Topics%20covered

Topics Covered

security advisory access control moderate threat keepalived mageia

Resolution

SRPMS

- 8/core/keepalived-2.2.4-1.mga8

Publication date: 19 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0567.html
Type: security
CVE: CVE-2021-44225

Topics%20covered

Topics Covered

security advisory access control moderate threat keepalived mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here