CVE catalog

CVE-2021-44225

keepalived: CVE-2021-44225

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.12% · Oct 25, 2026

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankeepalivedsid1:2.3.4-1fixed
Debiankeepalivedforky1:2.3.4-1fixed
Debiankeepalivedtrixie1:2.3.3-1fixed
Debiankeepalivedbookworm1:2.2.7-1fixed
Ubuntukeepalived18.041:1.3.2-1build1vulnerable
Ubuntukeepalived18.041:1.3.9-1vulnerable
Ubuntukeepalived18.041:1.3.9-1build1vulnerable
Ubuntukeepalived18.041:1.3.9-1ubuntu0.18.04.1vulnerable
Ubuntukeepalived18.041:1.3.9-1ubuntu0.18.04.2vulnerable
Ubuntukeepalived18.041:1.3.9-1ubuntu0.18.04.3fixed
Ubuntukeepalived20.041:2.0.10-1build2vulnerable
Ubuntukeepalived20.041:2.0.19-1build1vulnerable
Ubuntukeepalived20.041:2.0.19-2vulnerable
Ubuntukeepalived20.041:2.0.19-2ubuntu0.1fixed
Susekeepalivedopenstack cloud 92.0.19-3.6.1fixed
Susekeepalivedopenstack cloud crowbar 92.0.19-3.6.1fixed
Susekeepalivedlinux enterprise high availability extension 15 sp12.0.19-150100.3.6.1fixed
Susekeepalivedlinux enterprise high availability extension 15 sp22.0.19-150100.3.6.1fixed
Susekeepalivedlinux enterprise high availability extension 15 sp32.0.19-150100.3.6.1fixed
Opensusekeepalivedleap 15.32.0.19-150100.3.6.1fixed
Ubuntukeepalived18.041:1.3.2-1build1vulnerable
Ubuntukeepalived18.041:1.3.9-1vulnerable
Ubuntukeepalived18.041:1.3.9-1build1vulnerable
Ubuntukeepalived18.041:1.3.9-1ubuntu0.18.04.1vulnerable
Ubuntukeepalived18.041:1.3.9-1ubuntu0.18.04.2vulnerable
Ubuntukeepalived18.041:1.3.9-1ubuntu0.18.04.3fixed
Ubuntukeepalived20.041:2.0.10-1build2vulnerable
Ubuntukeepalived20.041:2.0.19-1build1vulnerable
Ubuntukeepalived20.041:2.0.19-2vulnerable
Ubuntukeepalived20.041:2.0.19-2ubuntu0.1fixed
Ubuntukeepalived22.041:2.1.5-0.2ubuntu1vulnerable
Ubuntukeepalived22.041:2.2.4-0.2fixed
Opensusekeepalivedtumbleweed2.2.7-1.1fixed
Susekeepalivedlinux enterprise high availability extension 15 sp42.2.2-150400.3.5.1fixed
Opensusekeepalivedleap 15.42.2.2-150400.3.5.1fixed
Susekeepalivedhpe helion openstack 82.0.19-3.9.1fixed
Susekeepalivedopenstack cloud 82.0.19-3.9.1fixed
Susekeepalivedopenstack cloud crowbar 82.0.19-3.9.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankeepalivedsourcesid1:2.2.4-0.2not yet assignedNot reportedNot reported
Debiankeepalivedsourceforky1:2.2.4-0.2not yet assignedNot reportedNot reported
Debiankeepalivedsourcetrixie1:2.2.4-0.2not yet assignedNot reportedNot reported
Debiankeepalivedsourcebookworm1:2.2.4-0.2not yet assignedNot reportedNot reported
Ubuntukeepaliveddeb18.041:1.3.9-1ubuntu0.18.04.3Not reportedUSN-5188-1Not reported
Ubuntukeepaliveddeb20.041:2.0.19-2ubuntu0.1Not reportedUSN-5188-1Not reported
Susekeepalivedrpmopenstack cloud 92.0.19-3.6.1Not reportedSUSE-SU-2022:3235-1Not reported
Susekeepalivedrpmopenstack cloud crowbar 92.0.19-3.6.1Not reportedSUSE-SU-2022:3235-1Not reported
Susekeepalivedrpmlinux enterprise high availability extension 15 sp12.0.19-150100.3.6.1Not reportedSUSE-SU-2022:2923-1Not reported
Susekeepalivedrpmlinux enterprise high availability extension 15 sp22.0.19-150100.3.6.1Not reportedSUSE-SU-2022:2923-1Not reported
Susekeepalivedrpmlinux enterprise high availability extension 15 sp32.0.19-150100.3.6.1Not reportedSUSE-SU-2022:2923-1Not reported
Opensusekeepalivedrpmleap 15.32.0.19-150100.3.6.1Not reportedSUSE-SU-2022:2923-1Not reported
Ubuntukeepaliveddeb18.041:1.3.9-1ubuntu0.18.04.3Not reportedUBUNTU-CVE-2021-44225Not reported
Ubuntukeepaliveddeb20.041:2.0.19-2ubuntu0.1Not reportedUBUNTU-CVE-2021-44225Not reported
Ubuntukeepaliveddeb22.041:2.2.4-0.2Not reportedUBUNTU-CVE-2021-44225Not reported
Opensusekeepalivedrpmtumbleweed2.2.7-1.1Not reportedOPENSUSE-SU-2024:11888-1Not reported
Susekeepalivedrpmlinux enterprise high availability extension 15 sp42.2.2-150400.3.5.1Not reportedSUSE-SU-2022:3232-1Not reported
Opensusekeepalivedrpmleap 15.42.2.2-150400.3.5.1Not reportedSUSE-SU-2022:3232-1Not reported
Susekeepalivedrpmhpe helion openstack 82.0.19-3.9.1Not reportedSUSE-SU-2022:3234-1Not reported
Susekeepalivedrpmopenstack cloud 82.0.19-3.9.1Not reportedSUSE-SU-2022:3234-1Not reported
Susekeepalivedrpmopenstack cloud crowbar 82.0.19-3.9.1Not reportedSUSE-SU-2022:3234-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [keepalived]Fixed

    Source package: [keepalived]

    Details (2)

    • 1:2.2.7-1+b2 · amd64 · bookworm

      Fixed · Fixed: 1:2.2.4-0.2

      dsa · keepalived · debian · bookworm; dsa · keepalived · debian · 12

    • 1:2.2.7-1+b2 · arm64 · bookworm

      Fixed · Fixed: 1:2.2.4-0.2

      dsa · keepalived · debian · bookworm; dsa · keepalived · debian · 12

[Debian 13 (Trixie)]

  • [keepalived]Fixed
    Details (2)

    • 1:2.3.3-1 · amd64 · trixie

      Fixed · Fixed: 1:2.2.4-0.2

      dsa · keepalived · debian · 13

    • 1:2.3.3-1 · arm64 · trixie

      Fixed · Fixed: 1:2.2.4-0.2

      dsa · keepalived · debian · 13

[openSUSE Tumbleweed]

  • [keepalived]Fixed

    Source package: [keepalived]

    Details (1)

    • 2.4.3+git0.53701f56-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 2.2.7-1.1

      dsa · keepalived · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]