Most recent entries from all

ALSA-2025:0743 — Moderate: keepalived security update

Affected: AlmaLinux:8: keepalived

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es):

* keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-06444

EUVD-2026-6385

fkie_cve-2024-41184

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

GHSA-343m-v77v-mv8r

msrc_CVE-2024-41184 — In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1 an integer overflow can occur. NOTE:…

msrc_CVE-2024-41184

RHBA-2025:1772 — Red Hat Bug Fix Advisory: Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog

golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON jose: resource exhaustion jose-go: improper handling of highly compressed data envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion keepalived: Integer overflow vulnerability in vrrp_ipsets_handler

RHSA-2025:0743 — Red Hat Security Advisory: keepalived security update

keepalived: Integer overflow vulnerability in vrrp_ipsets_handler

SUSE-SU-2024:3031-1 — Security update for keepalived

Security update for keepalived

UBUNTU-CVE-2024-41184

Affected: Ubuntu:Pro:14.04:LTS: keepalived, Ubuntu:16.04:LTS: keepalived, Ubuntu:18.04:LTS: keepalived, Ubuntu:20.04:LTS: keepalived, Ubuntu:22.04:LTS: keepalived, Ubuntu:24.04:LTS: keepalived, Ubuntu:25.10: keepalived, Ubuntu:26.04:LTS: keepalived

WID-SEC-W-2025-0200 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Ausspaehen von Informationen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen auszuspähen.