111 matches found
CVE-2026-73442
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...
CVE-2026-73443
On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be...
CVE-2026-73442
CVE-2026-73442 affects Arista EOS switches with VRRP configured (any version; authentication not required). The root cause is CWE-532 : peer device VRRP authentication credentials are written in cleartext to agent trace logs on the switch. An authenticated user with sufficient privileges (or a sy...
EUVD-2026-81000
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...
EUVD-2026-80009
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...
CVE-2026-73444
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...
CVE-2026-73444
CVE-2026-73444 affects Arista EOS switches where VRRPv2 is configured with IP-AH authentication enabled. An unauthenticated attacker with access to the layer 2 network segment can bypass VRRP authentication and claim the virtual router master role, enabling them to intercept, modify, or discard t...
Security Advisory 0157
Security Advisory 0157 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Virtual Router Redundancy Protocol VRRP enabled. In...
NewStart CGSL MAIN 6.06 : keepalived Vulnerability (NS-SA-2026-0064)
The remote NewStart CGSL host, running version MAIN 6.06, has keepalived packages installed that are affected by a vulnerability: - In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an...
MINI-3F53-VRRP-X377
Bulletin has no description...
MINI-6QP7-VRRP-9QR8
Bulletin has no description...
Azure Linux 3.0 Security Update: keepalived (CVE-2024-41184)
The version of keepalived installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41184 advisory. - In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can...
MiracleLinux 8 : keepalived-2.1.5-10.el8_10 (AXSA:2025-9597:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9597:01 advisory. keepalived: Integer overflow vulnerability in vrrpipsetshandler CVE-2024-41184 Tenable has extracted the preceding description block directly from the...
EUVD-2018-6380
Malware in sbrugna...
EUVD-2018-11873
Malware in sbrugna...
EUVD-2013-5406
Malware in sbrugna...
EUVD-2019-6223
Malware in sbrugna...
keepalived: Integer overflow vulnerability in vrrp_ipsets_handler
A flaw was found in the keepalived package. An integer overflow occurs when incorrect arguments are passed. As a result, reading from an undefined address takes place...
RLSA-2025:0917 Moderate: keepalived security update
The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server IPVS kernel module providing layer-4 transport layer load balancing. Keepalived implements a set of checke...
Linux Distros Unpatched Vulnerability : CVE-2018-14463
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrpprint for VRRP version 2, a different vulnerability than CVE-2019-15167...