Read the docs
Red Hat Security Advisory

RHSA-2019:1945

keepalived security update

Released 2019-07-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 48

keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in lib/html.c has no validation of the status cod…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03746 Published 2018-11-08 Partial fix CWE-787