CVE-2024-41184
Publication date 18 July 2024
Last updated 24 July 2024
Ubuntu priority
In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.
Read the notes from the security team
Why is this CVE low priority?
An invalid and unlikely configuration must be set for this
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| keepalived | 24.10 oracular |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
|
| 14.04 LTS trusty | Ignored end of ESM support, was needs-triage |
Notes
mdeslaur
An empty ipset name needs to be configured by the user, which is an invalid configuration and unlikely. Setting priority to low.