The vulnerability of the vrrp_ipset_handler function (fglobal parser.c) in the network traffic balancing system of Keepalived, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 26 Aug 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Integer overflow in vrrp_ipset_handler (fglobal parser.c) of Keepalived may lead to data breach and disruption.

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Integer Overflow in KeepAlived (CVE-2024-41184)	7 Jul 202520:04	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0015: keepalived (ALINUX3-SA-2025:0015)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : keepalived (ALSA-2025:0743)	29 Jan 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : keepalived (ALSA-2025:0917)	7 Feb 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: keepalived (CVE-2024-41184)	22 Jan 202600:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: keepalived (CVE-2024-41184)	20 Sep 202400:00	–	nessus
Tenable Nessus	MiracleLinux 8 : keepalived-2.1.5-10.el8_10 (AXSA:2025-9597:01)	13 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : keepalived-2.2.8-4.el9_5 (AXSA:2025-9635:02)	13 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0079)	9 Jun 202500:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0171)	25 Jul 202500:00	–	nessus

Vulners

Node

novell opensuse_leapMatch15.5

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

OR

novell opensuse_leapMatch15.3

OR

novell opensuse_leapMatch15.4

OR

novell suse_linux_enterprise_serverMatch15

OR

novell suse_linux_enterprise_desktopMatch15

OR

novell opensuse_leap_microMatch5.3

OR

novell opensuse_leap_microMatch5.4

OR

novell opensuse_leap_microMatch5.5

OR

novell opensuse_leapMatch15.6

Source	Link
github	www.github.com/acassen/keepalived/issues/2447
github	www.github.com/acassen/keepalived/commit/e78513fe0ce5d83c226ea2c0bd222f375c2438e7
suse	www.suse.com/security/cve/CVE-2024-41184.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-41184
github	www.github.com/advisories/GHSA-343m-v77v-mv8r
vuldb	www.vuldb.com/
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-keepalived-cve-2024-41184/
web	www.web.nvd.nist.gov/view/vuln/detail

12 Dec 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 39.8

CVSS 210

EPSS0.00616

keepalived integer overflow ipset vulnerability parser vulnerability