« Back to list

CVE-2011-1784

Status: ModifiedLow (3.6)—

The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2011-1784",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.6,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-05-20T22:55:04.970",
  "references": [
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.debian.org/debian-security/2011/05/msg00012.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.debian.org/debian-security/2011/05/msg00013.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.debian.org/debian-security/2011/05/msg00018.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/05/10/5",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/05/16/7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/44460",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.osvdb.org/72380",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/47859",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626281",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.debian.org/debian-security/2011/05/msg00012.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.debian.org/debian-security/2011/05/msg00013.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.debian.org/debian-security/2011/05/msg00018.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/05/10/5",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://openwall.com/lists/oss-security/2011/05/16/7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/44460",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/72380",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/47859",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=704039",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67477",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files."
    },
    {
      "lang": "es",
      "value": "La función pidfile_write en core/pidfile.c en keepalived v1.2.2 y versiones anteriores utiliza permisos 0666 permisos para (1) keepalived.pid, (2) checkers.pid, y (3) archivos vrrp.pid en /var/run/, lo que permite a usuarios locales matar procesos de su elección escribiendo un PID en uno de estos archivos."
    }
  ],
  "lastModified": "2026-06-16T23:30:06.847",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2556FCA0-2590-424E-9A79-867164153E6E",
              "versionEndIncluding": "1.2.2"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAF523F2-D9A6-432D-A7D9-A50FA79C26C3"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FA9238F-D69D-473B-A104-47D8BA33D5DD"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAB00A40-B543-405B-B28C-836F0C6E7F04"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B370AC9F-7B1B-4473-8034-38867C7C2A58"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41D04C30-FF47-474B-9398-144F0BD074A4"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01B2EED4-1A05-43FE-84BB-A346E712E3F1"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.3.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B71E052F-AC0C-4976-B433-3299B4E3A6D5"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.3.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7C7D639-9B18-4217-9192-73D34D14FD0D"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.4.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29CA469F-A2C8-4BE7-9C94-FDF1892C15DE"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF26EB0B-8A82-4EB2-A7F7-57A82FBADD72"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.4.9a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8742E6FD-8F67-4EEE-B415-8A0E0508AADA"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.5.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A7F6776-CA88-4573-B9FE-976114C0E2F0"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.5.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EB667C6-DDC3-4D4F-AA6C-B014CC3866E1"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.5.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEF5D572-7637-4348-81D4-D0BB33E19FBF"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.5.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DF99A64-2885-4BCF-9563-D6C667642BBA"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.5.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "175E0321-5E10-4C26-A559-026AFFA86353"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.5.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC9512F9-2900-4445-8027-2349DD9D0EF9"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D202340-9154-49B2-AF41-6D4BC366D29F"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5403A412-60FF-4FFD-B58E-A9349A53CD75"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62973329-4CE3-4BFD-8787-5964BDD3DA7B"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AEA2DA6-DDB5-4821-ABD0-1C41AC40B36F"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "828B15F2-69EB-4D78-93F6-F46D3FE0853B"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "178A1EE6-2DA8-48B8-B86D-8F2905B98E35"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B835C3B-D5A6-4B0E-8EC0-BDAB8A8A8B1D"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9AAF52F0-8479-4F01-A954-8BDF1B02FD77"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24424629-3EFC-42F0-A0F4-FDB838579F52"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.6.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C0B9003D-9824-4FEE-B752-5BFA46CD8407"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "645E15DC-A3CC-4EC1-A6BC-2A11F5326E6C"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:0.7.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7D6A830-2D76-4113-87CA-66F4E0D25BC3"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1562A45C-E100-4B92-B500-1C66D6A51561"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CD16143-ABB7-46F7-A383-9760DCB0D6E6"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "013C7056-6842-485C-BB83-2C1411AF4539"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07C8E0C2-8622-4436-8D45-734322676F07"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69B97CC0-232E-4389-A099-2CD4CC86C1F7"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22300323-06D6-404A-B10F-85B34A05DFC3"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89ACDC55-8AD0-43C2-A5B4-5FCC19A909D9"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3356A7B3-9A8B-4C8C-93FB-CB4796C05629"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A76BC438-7E36-4C98-94B9-507BDA393BB5"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDA4BFCC-D573-4AC3-82E4-2F940970DC29"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B7C8FF4-C8F7-4155-806C-A83F6750B05E"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "223AC16F-8B70-4E55-A01B-A6012532CB8A"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F945C6D-ADE0-4077-B8EF-A6CCB0B4B761"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3099373-E05A-4DF0-88D8-2B73F716B578"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA9480E7-B7DB-47C5-9CFD-38ED9E0A2454"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC6D1E5C-4906-4D8F-84CE-B131658D3242"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53D59BB9-26D8-43E7-BA7C-0BFDC4C8AEB3"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D25A1C7-E02F-4F6B-B553-A559CC235E9D"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1886BCB-E5A5-4897-B486-B8AA5560A2B7"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDA0C618-30D4-41BB-96AB-DD4D9B4D4085"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B852D87-A732-448A-8A56-93E45FD1AA07"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF70E5AB-28E5-4968-95A2-F1E8540983A4"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F070102-D4C2-4155-A587-7E6CC20508C8"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C029FE04-EE97-4D69-B095-75D96F1DEF2D"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.1.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C89BA5B-BF3A-43B3-828C-33721FAF7DDD"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FBE0275-1FB8-433A-AE8F-E3A570249AD1"
            },
            {
              "criteria": "cpe:2.3:a:keepalived:keepalived:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FFB7DCD5-726F-48BF-BFD4-CCB7380C0EAC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}