Read the docs
TI-2011-01563 Aliases CVE-2011-1784GHSA-xjrv-p75r-gqqr

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666…

Priority LOW 17CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

Why it matters now

EPSS 0.00367 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 57

CPEVersionsRoleVendor
cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:*up to 1.2.2VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:*0.2.1VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:*0.2.3VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:*0.2.6VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:*0.2.7VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:*0.3.5VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:*0.3.6VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:*0.3.7VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:*0.3.8VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:*0.4.8VulnerableKeepalived
  • cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:* Versions up to 1.2.2 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:* Versions 0.2.1 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:* Versions 0.2.3 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:* Versions 0.2.6 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:* Versions 0.2.7 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:* Versions 0.3.5 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:* Versions 0.3.6 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:* Versions 0.3.7 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:* Versions 0.3.8 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:* Versions 0.4.8 Vulnerable ·Keepalived
Show 47 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:*0.4.9VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:*0.4.9aVulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:*0.5.3VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:*0.5.5VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:*0.5.6VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:*0.5.7VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:*0.5.8VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:*0.5.9VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:*0.6.1VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:*0.6.2VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:*0.6.3VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:*0.6.4VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:*0.6.5VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:*0.6.6VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:*0.6.7VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:*0.6.8VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:*0.6.9VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:*0.6.10VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:*0.7.1VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:*0.7.6VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:*1.1.2VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:*1.1.3VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:*1.1.4VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:*1.1.5VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:*1.1.6VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:*1.1.7VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:*1.1.8VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:*1.1.9VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:*1.1.10VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:*1.1.11VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:*1.1.12VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:*1.1.13VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:*1.1.14VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:*1.1.15VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:*1.1.16VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:*1.1.17VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:*1.1.18VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:*1.1.19VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:*1.1.20VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableKeepalived
cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableKeepalived
  • cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:* Versions 0.4.9a Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:* Versions 0.5.3 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:* Versions 0.5.5 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:* Versions 0.5.6 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:* Versions 0.5.7 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:* Versions 0.5.8 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:* Versions 0.5.9 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:* Versions 0.6.1 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:* Versions 0.6.2 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:* Versions 0.6.3 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:* Versions 0.6.4 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:* Versions 0.6.5 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:* Versions 0.6.6 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:* Versions 0.6.7 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:* Versions 0.6.8 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:* Versions 0.6.9 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:* Versions 0.6.10 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:* Versions 0.7.1 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:* Versions 0.7.6 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:* Versions 1.1.4 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:* Versions 1.1.5 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:* Versions 1.1.6 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:* Versions 1.1.7 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:* Versions 1.1.8 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:* Versions 1.1.9 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:* Versions 1.1.10 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:* Versions 1.1.11 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:* Versions 1.1.12 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:* Versions 1.1.13 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:* Versions 1.1.14 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:* Versions 1.1.15 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:* Versions 1.1.16 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:* Versions 1.1.17 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:* Versions 1.1.18 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:* Versions 1.1.19 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:* Versions 1.1.20 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Keepalived
  • cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Keepalived

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-1784
  2. 2026-10-03 Alias added: GHSA-xjrv-p75r-gqqr

References

Other 8

  • TI-2018-13553 keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes… CVSS 3.0CRITICAL 9.8
  • TI-2018-13499 keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to… CVSS 3.0HIGH 7.5
  • TI-2021-19916 In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message… CVSS 3.1MEDIUM 5.4
  • TI-2018-13500 keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary… CVSS 3.0MEDIUM 4.7
  • TI-2018-13498 keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a… CVSS 3.0MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences