Critical Photon OS Security Update - PHSA-2024-3.0-0781

Updates of 'keepalived' packages of Photon OS have been released...

Photon OS 4.0: Keepalived PHSA-2023-4.0-0321

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0321. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

A flaw was found in the keepalived package. An integer overflow occurs when incorrect arguments are passed. As a result, reading from an undefined address takes place. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

DEBIAN-CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

AZL-43419 CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

AZL-43423 CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

UBUNTU-CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

CVE-2024-41184 (keepalived) : In the vrrp_ipsets_handler (fglobal_parser.c) of keepalived up to 2.3.1, an integer overflow can occur. The issue is tied to enabling an empty ipset name, which is user-configurable, and represents a high-severity impact across confidentiality, integrity, and availab...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

OPENSUSE-SU-2024:11888-1 keepalived-2.2.7-1.1 on GA media

These are all security issues fixed in the keepalived-2.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10893-1 keepalived-2.2.2-4.2 on GA media

These are all security issues fixed in the keepalived-2.2.2-4.2 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : keepalived (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or...

RHEL 7 : keepalived (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - keepalived: dbus access control bypass CVE-2021-44225 Note that Nessus has not tested for this issue but has instea...