In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1 an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

🗓️ 19 Sep 2024 07:00:00Reported by MicrosoftType

Integer overflow in vrrp_ipsets_handler in keepalived up to 2.3.1; potential vulnerability with empty ipset name.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Integer Overflow in KeepAlived (CVE-2024-41184)	7 Jul 202520:04	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0015: keepalived (ALINUX3-SA-2025:0015)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : keepalived (ALSA-2025:0743)	29 Jan 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : keepalived (ALSA-2025:0917)	7 Feb 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: keepalived (CVE-2024-41184)	22 Jan 202600:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: keepalived (CVE-2024-41184)	20 Sep 202400:00	–	nessus
Tenable Nessus	MiracleLinux 8 : keepalived-2.1.5-10.el8_10 (AXSA:2025-9597:01)	13 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : keepalived-2.2.8-4.el9_5 (AXSA:2025-9635:02)	13 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0079)	9 Jun 202500:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0171)	25 Jul 202500:00	–	nessus