GLSA-201207-07 : Keepalived: Denial of Service
Low Nessus Plugin ID 59899
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-201207-07 (Keepalived: Denial of Service)
The 'pidfile_write()' function in pidfile.c in Keepalived writes PID files with insecure permissions.
A local attacker may be able to cause a Denial of Service of arbitrary processes.
There is no known workaround at this time.
SolutionAll Keepalived users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=sys-cluster/keepalived-1.2.2-r3'