Critical Photon OS Security Update - PHSA-2019-0160

Updates of 'linux-aws', 'mysql', 'keepalived', 'glibc', 'linux-secure', 'libpng', 'snappy', 'linux-esx', 'mercurial', 'linux' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-3.0-0015

Updates of 'elfutils', 'linux-aws', 'linux-esx', 'keepalived', 'mysql', 'libarchive', 'mercurial', 'linux-secure', 'linux', 'kubernetes' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0235

Updates of 'snappy', 'mercurial', 'linux', 'linux-esx', 'keepalived' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0235

An update of 'keepalived', 'linux-esx', 'linux', 'snappy', 'mercurial' packages of Photon OS has been released...

Fedora Update for keepalived FEDORA-2018-3fbc181b3e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : keepalived (openSUSE-2019-1008)

This update for keepalived to version 2.0.10 fixes the following issues : Security issues fixed bsc1015141 : - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new...

Photon OS 1.0: Keepalived PHSA-2019-1.0-0212

An update of the keepalived package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0212. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Keepalived PHSA-2019-2.0-0134

An update of the keepalived package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0134. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GLSA-201903-01 : Keepalived: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201903-01 Keepalived: Multiple vulnerabilities Multiple vulnerabilities have been discovered in keepalived. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted...

Keepalived: Multiple vulnerabilities

Background Keepalived is a strong & robust keepalive facility to the Linux Virtual Server project. Description Multiple vulnerabilities have been discovered in keepalived. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a specially crafted reque...

Critical Photon OS Security Update - PHSA-2019-0212

Updates of 'rsyslog', 'util-linux', 'python3', 'libsolv', 'linux', 'perl', 'linux-esx', 'runc', 'mysql', 'mesos', 'keepalived' packages of Photon OS have been released...

Security Bulletin: A vulnerability in keepalived affects PowerKVM

Summary PowerKVM is affected by a vulnerability in keepalived. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-19115 DESCRIPTION: keepalived is vulnerable to a denial of service, caused by a heap-based buffer overflow flaw in the extractstatuscode function in...

Important Photon OS Security Update - PHSA-2019-0134

Updates of 'keepalived', 'glibc', 'rsyslog', 'binutils', 'linux' packages of Photon OS have been released...

Amazon Linux 2 : keepalived (ALAS-2019-1154)

Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allows malicious web server or man-in-the-middle attacker pretending to be a web server to cause either a denial of service or potentially execute arbitrary...

Important: keepalived

Issue Overview: Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server allows malicious web server or man-in-the-middle attacker pretending to be a web server to cause either a denial of service or potentially...

Denial Of Service (DoS)

keepalived is vulnerable to denial of service. A lack of validation of HTTP status codes in the extractstatuscode function in lib/html.c results in a heap-based buffer overflow when parsing malicious HTTP status codes, allowing a remote attacker to crash the daemon, or possibly execute arbitrary...

CentOS 7 : keepalived (CESA-2019:0022)

An update for keepalived is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Oracle Linux 7 : keepalived (ELSA-2019-0022)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-0022 advisory. 1.3.5-8 - Fixed patch that was incorrectly removed 1652694 1.3.5-7 - Fix buffer overflow when parsing HTTP status codes 1652694 Tenable has extracted the...

RHEL 7 : keepalived (RHSA-2019:0022)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0022 advisory. The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the...

Scientific Linux Security Update : keepalived on SL7.x x86_64 (20190103)

Security Fixes : - keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution CVE-2018-19115 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid120980...