CVE-2024-41184

2024-07-1800:00:00

ubuntu.com

vrrp_ipsets_handler

integer overflow

keepalived

AI Score

6.8

Confidence

High

JSON

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through
2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be
worthwhile because an empty ipset name must be configured by the user.

Bugs

<https://github.com/acassen/keepalived/issues/2447#issuecomment-2231329734>

Notes

Author	Note
	Priority reason: An invalid and unlikely configuration must be set for this
mdeslaur	An empty ipset name needs to be configured by the user, which is an invalid configuration and unlikely. Setting priority to low.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchkeepalived< anyUNKNOWN
ubuntu20.04noarchkeepalived< anyUNKNOWN
ubuntu22.04noarchkeepalived< anyUNKNOWN
ubuntu24.04noarchkeepalived< anyUNKNOWN
ubuntu14.04noarchkeepalived< anyUNKNOWN
ubuntu16.04noarchkeepalived< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	keepalived	< any	UNKNOWN
ubuntu	20.04	noarch	keepalived	< any	UNKNOWN
ubuntu	22.04	noarch	keepalived	< any	UNKNOWN
ubuntu	24.04	noarch	keepalived	< any	UNKNOWN
ubuntu	14.04	noarch	keepalived	< any	UNKNOWN
ubuntu	16.04	noarch	keepalived	< any	UNKNOWN