CVE-2024-41184

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-18 · updated 2026-06-17
Weakness: CWE-190

Description

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Affected products

Acassen Keepalived: through 2.3.1

References

https://github.com/acassen/keepalived/issues/2447#issuecomment-2231329734
https://github.com/acassen/keepalived/issues/2447#issuecomment-2231329734

Get alerted when CVE-2024-41184 or the next vulnerability affects your stack