[{"CVE":"CVE-2018-19044","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:2285"],"bugzilla":"1651863","bugzilla_description":"CVE-2018-19044 keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["keepalived-0:1.3.5-16.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19044.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.0"},{"CVE":"CVE-2018-19045","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651866","bugzilla_description":"CVE-2018-19045 keepalived: Insecure permissions when creating new temporary files allows for leaking of sensitive data","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19045.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19046","severity":"moderate","public_date":"2018-11-08T00:00:00Z","advisories":[],"bugzilla":"1651869","bugzilla_description":"CVE-2018-19046 keepalived: Insecure use of temporary files allows attackers read sensitive information from pre-existing files","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19046.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss3_score":"7.1"},{"CVE":"CVE-2018-19115","severity":"important","public_date":"2018-11-08T00:00:00Z","advisories":["RHSA-2019:0022","RHSA-2019:1792","RHSA-2019:1945"],"bugzilla":"1651871","bugzilla_description":"CVE-2018-19115 keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":["keepalived-0:1.3.5-1.el7_4.1","keepalived-0:1.3.5-8.el7_6","keepalived-0:1.3.5-7.el7_5.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19115.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"8.1"}]