CVE-2024-43804 OS Command Injection via Port Scan Functionality in Roxy-WI

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. An OS Command Injection vulnerability allows any authenticated user on the application to execute arbitrary code on the web application server via port scanning functionality. User-supplied input is used withou...

CVE-2024-43804 OS Command Injection via Port Scan Functionality in Roxy-WI

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. An OS Command Injection vulnerability allows any authenticated user on the application to execute arbitrary code on the web application server via port scanning functionality. User-supplied input is used withou...

openSUSE: Security Advisory for keepalived (SUSE-SU-2024:3031-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : keepalived (SUSE-SU-2024:3031-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3031-1 advisory. - CVE-2024-41184: Fixed integer overflow in vrrpipsetshandler bsc1228123 Tenable has extracted the preceding description block directly from the SUSE...

SUSE-SU-2024:3031-1 Security update for keepalived

This update for keepalived fixes the following issues: - CVE-2024-41184: Fixed integer overflow in vrrpipsetshandler bsc1228123...

The vulnerability of the vrrp_ipset_handler function (fglobal parser.c) in the network traffic balancing system of Keepalived, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vrrpipsethandler function fglobal parser.c in the network traffic balancing system Keepalived is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Photon OS 5.0: Keepalived PHSA-2024-5.0-0347

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0347. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2024-5.0-0347

Updates of 'keepalived' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2024-4.0-0667

Updates of 'keepalived', 'postgresql14', 'postgresql13' packages of Photon OS have been released...

Photon OS 3.0: Keepalived PHSA-2024-3.0-0781

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0781. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Keepalived PHSA-2024-4.0-0667

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0667. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2024-3.0-0781

Updates of 'keepalived' packages of Photon OS have been released...

Photon OS 4.0: Keepalived PHSA-2023-4.0-0321

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0321. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

A flaw was found in the keepalived package. An integer overflow occurs when incorrect arguments are passed. As a result, reading from an undefined address takes place. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

AZL-43419 CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

AZL-43423 CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

DEBIAN-CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...