Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 531
Alerts This Week
Warning Icon 1 531

Scientific Linux: SLSA-2019-0022-1 Critical Keepalived Buffer Overflow

Calendar Jan 03, 2019 • User Avatar LinuxSecurity Advisories
1 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory denial of service buffer overflow security fix keepalived Scientific Linux
keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution (CVE-2018-19115) SL7 x86_64 keepalived-1.3.5-8.el7_6.x86_64.rpm keepalived-debuginfo-1.3.5-8.el7_6.x86_64.rpm - Scientific Linux Development Team 
Synopsis: Important: keepalived security update
Advisory ID:       SLSA-2019:0022-1
Issue Date:        2019-01-03
CVE Numbers:       CVE-2018-19115
--

Security Fix(es):

* keepalived: Heap-based buffer overflow when parsing HTTP status codes
allows for denial of service or possibly arbitrary code execution
(CVE-2018-19115)
--

SL7
  x86_64
    keepalived-1.3.5-8.el7_6.x86_64.rpm
    keepalived-debuginfo-1.3.5-8.el7_6.x86_64.rpm

- Scientific Linux Development Team