SUSE-SU-2024:3633-1 Security update for keepalived

This update for keepalived fixes the following issues: - CVE-2024-41184: Fixed integer overflow in vrrpipsetshandler bsc1228123...

CVE-2024-41184

A flaw was found in the keepalived package. An integer overflow occurs when incorrect arguments are passed. As a result, reading from an undefined address takes place. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

CVE-2024-41184

CVE-2024-41184 (keepalived) : In the vrrp_ipsets_handler (fglobal_parser.c) of keepalived up to 2.3.1, an integer overflow can occur. The issue is tied to enabling an empty ipset name, which is user-configurable, and represents a high-severity impact across confidentiality, integrity, and availab...

CVE-2024-41184

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...