CVE-2024-41184: Integer Overflow
In the vrrpipsetshandler handler (fglobalparser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41184?
CVE-2024-41184 has a medium severity rating due to potential integer overflow vulnerabilities.
How do I fix CVE-2024-41184?
To fix CVE-2024-41184, upgrade Keepalived to version 2.3.2 or later, where the vulnerability has been addressed.
What is the impact of CVE-2024-41184?
CVE-2024-41184 could potentially lead to application crashes or unexpected behavior due to integer overflow.
Who is affected by CVE-2024-41184?
CVE-2024-41184 affects users of Keepalived versions up to and including 2.3.1 who configure an empty ipset name.
Is CVE-2024-41184 easy to exploit?
While CVE-2024-41184 does require specific configuration of an empty ipset name, it remains a potential risk for systems using vulnerable versions.