CVE-2024-41184

2024-07-1801:15:15

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-41184

integer overflow

vrrp_ipsets_handler

keepalived

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

JSON

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchkeepalived= 2.3.1-r0UNKNOWN
Alpine3.20-communitynoarchkeepalived= 2.2.8-r0UNKNOWN