Most recent entries from all

ALSA-2022:1930 — Moderate: keepalived security and bug fix update

Affected: AlmaLinux:8: keepalived

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es):

* keepalived: dbus access control bypass (CVE-2021-44225)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-02653

certfr-2024-avi-0781 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent…

certfr-2024-avi-0781

EUVD-2026-32850

fkie_cve-2021-44225

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property

GHSA-jpw2-cwxg-4qv8

gsd-2021-44225

msrc_CVE-2021-44225 — In Keepalived through 2.2.4 the D-Bus policy does not sufficiently restrict the message destination allowing any user t…

msrc_CVE-2021-44225

OESA-2021-1477 — keepalived security update

Affected: openEuler:20.03-LTS-SP1: keepalived, openEuler:20.03-LTS-SP2: keepalived

High Availability monitor built upon LVS, VRRP and service pollers. Security Fix(es): In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property(CVE-2021-44225)

openSUSE-SU-2024:11888-1 — keepalived-2.2.7-1.1 on GA media

keepalived-2.2.7-1.1 on GA media

SUSE-SU-2022:2923-1 — Security update for keepalived

Security update for keepalived

UBUNTU-CVE-2021-44225

Affected: Ubuntu:18.04:LTS: keepalived, Ubuntu:20.04:LTS: keepalived, Ubuntu:22.04:LTS: keepalived

WID-SEC-W-2023-1885 — Red Hat Enterprise Linux (keepalived): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in keepalived ausnutzen, um Sicherheitsvorkehrungen zu umgehen.