CRITICAL9.8CVE-2024-41184In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. from 0
from 0, < 1:2.0.10-1
from 0, < 1:1.2.13-1+deb8u1
HIGH7.5keepalived 2.0.8 used mode 0666 when creating new temporary files upon a call to PrintData or PrintStats, potentially leaking sensitive inf…
from 0, < 1:2.0.10-1
MEDIUM5.4keepalived - security update
from 0, < 1:2.1.5-0.2+deb11u1
MEDIUM5.4keepalived - security update
from 0, < 1:2.0.10-1+deb10u1
MEDIUM4.7keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats.
from 0, < 1:2.0.10-1
MEDIUM4.7keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats.
from 0, < 1:2.0.10-1
—The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers…
from 0, < 1:1.2.2-2