CVE-2024-41184 – keepalived: Integer overflow vulnerability in vrrp_ipsets_handler

https://notcve.org/view.php?id=CVE-2024-41184

18 Jul 2024 — In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user. En el controlador vrrp_ipsets_handler (fglobal_parser.c) de keepalived hasta 2.3.1, puede ocurrir un desbordamiento de enteros. NOTA: Es posible que este registro CVE no valga la pena porque el usuario debe configurar un nombre de ipset vacío. A flaw was found in the keepalived package. • https://github.com/acassen/keepalived/issues/2447#issuecomment-2231329734 • CWE-190: Integer Overflow or Wraparound •