Heap-based buffer overflow in Keepalived - CVE-2018-19115

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU15792

Heap-based buffer overflow in Keepalived - CVE-2018-19115

Published: November 10, 2018


Vulnerability identifier: #VU15792
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-19115
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when parsing HTTP status codes within the extract_status_code() function in lib/html.c. A remote attacker can send a specially crafted HTTP request, trigger heap-based buffer overflow and peform denial of service attack or execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

Keepalived
Gentoo Linux
Red Hat Enterprise Linux for ARM
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Server - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Fedora
keepalived (Ubuntu package)
keepalived (Red Hat package)
keepalived

How to mitigate CVE-2018-19115

Install updates from vendor's website.

Keepalived - update to 2.0.7
keepalived (Ubuntu package) - addressed in versions 1:1.2.24-1ubuntu0.16.04.2, 1:1.3.9-1ubuntu0.18.04.2, 1:1.3.9-1ubuntu1.1
keepalived (Red Hat package) - addressed in versions 1.3.5-1.el7_4.1, 1.3.5-7.el7_5.2
keepalived - update to 2.0.10-1.fc29

External References

Related Security Bulletins