CVE-2018-19045: Exposure of Sensitive Information to an Unauthorized Actor

keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive information...

CVE-2018-19115: Out-of-bounds Write

keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extractstatuscode in lib/html.c has no validation of the status code and instead writes an unlimited amount of data to the heap...

PT-2018-3576

Name of the Vulnerable Software and Affected Versions keepalived version 2.0.8 Description The issue is related to the implementation of PrintData or PrintStats calls in the Keepalived network traffic balancing system. It is associated with a lack of protection for service data when using mode...

PT-2018-3575

Name of the Vulnerable Software and Affected Versions keepalived versions 2.0.8 Description The issue is related to the implementation of PrintData or PrintStats calls in the Keepalived network traffic balancing system, which is associated with incorrect link resolution before accessing a file...

PT-2018-3574

Name of the Vulnerable Software and Affected Versions keepalived version 2.0.8 Description The issue is related to the handling of temporary files when the PrintData or PrintStats functions are called. A local attacker could potentially exploit this by creating a file with a specific name, such a...

PT-2018-2800

Name of the Vulnerable Software and Affected Versions keepalived versions prior to 2.0.7 Description The issue is related to a heap-based buffer overflow when parsing HTTP status codes, potentially resulting in a denial of service DoS or other unspecified impacts. This occurs because the extract...

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

Information disclosure

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

CVE-2018-1240

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

CVE-2018-1240: Exposure of Sensitive Information to an Unauthorized Actor

Dell EMC ViPR Controller, versions after 3.0.0.38, contain an information exposure vulnerability in the VRRP. VRRP defaults to an insecure configuration in Linux's keepalived component which sends the cluster password in plaintext through multicast. A malicious user, having access to the vCloud...

Mandriva Linux Security Advisory : keepalived (MDVSA-2013:096)

Updated keepalived package fixes security vulnerability : The pidfilewrite function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the 1 keepalived.pid, 2 checkers.pid, and 3 vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing ...

Fedora Update for keepalived FEDORA-2012-12377

Check for the Version of keepalived OpenVAS Vulnerability Test Fedora Update for keepalived FEDORA-2012-12377 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for keepalived FEDORA-2012-12367

Check for the Version of keepalived OpenVAS Vulnerability Test Fedora Update for keepalived FEDORA-2012-12367 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for keepalived FEDORA-2012-12377

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for keepalived FEDORA-2012-12367

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : keepalived-1.2.3-2.fc16 (2012-12367)

Update to keepalived v1.2.3 stable release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 17 : keepalived-1.2.5-2.fc17 (2012-12377)

Update to keepalived v1.2.5 stable release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 17 Update: keepalived-1.2.5-2.fc17

The main goal of the keepalived project is to add a strong & robust keepali ve facility to the Linux Virtual Server project. This project is written in C with multilayer TCP/IP stack checks. Keepalived implements a framework based on three family checks : Layer3, Layer4 & Layer5/7. This framework...

[SECURITY] Fedora 16 Update: keepalived-1.2.3-2.fc16

The main goal of the keepalived project is to add a strong & robust keepali ve facility to the Linux Virtual Server project. This project is written in C with multilayer TCP/IP stack checks. Keepalived implements a framework based on three family checks : Layer3, Layer4 & Layer5/7. This framework...

Gentoo Security Advisory GLSA 201207-07 (keepalived)

The remote host is missing updates announced in advisory GLSA 201207-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...