CVE-2021-44225

Name of the Vulnerable Software and Affected Versions Keepalived versions 2.2.4 and earlier

Description The issue is related to insufficient restrictions in the D-Bus policy, allowing any user to inspect and manipulate properties. This can lead to access-control bypass in certain situations where an unrelated D-Bus system service has a settable property. The vulnerability can be exploited by a remote attacker to access confidential data and compromise its integrity.

Recommendations For Keepalived versions 2.2.4 and earlier, consider restricting access to the D-Bus system service to minimize the risk of exploitation. As a temporary workaround, limit the ability of users to inspect and manipulate properties until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.