Logo
›
›component›keepalived
Name
keepalived
Version
2.2.8
Type
library
Description
High Availability monitor built upon LVS, VRRP and service pollers
Licenses
GPL-2.0-only
PURL
-
CPE
cpe:2.3:*:keepalived:keepalived:2.2.8:*:*:*:*:*:*:*

Other Versions#

Project
Branch
Version
yocto
kirkstone
2.2.2
yocto
master
2.3.4

Patches#

#
Title
Author
Resolve
1
lib: don't return subtracted addresses for rb_find() compare
Quentin Armitage <quentin@armitage.org.uk>
CVE-2024-41184
2
vrrp: Handle empty ipset names with vrrp_ipsets keyword
Quentin Armitage <quentin@armitage.org.uk>
CVE-2024-41184
3
configure.ac: Do not emit compiler flags into object files
Khem Raj <raj.khem@gmail.com>
4
vrrp and ipvs: handle empty nftables chain names
Quentin Armitage <quentin@armitage.org.uk>
CVE-2024-41184
5
vrrp: handle empty iptables chain names - vrrp_iptables
Quentin Armitage <quentin@armitage.org.uk>
CVE-2024-41184

Vulnerabilities#

Name
Analysis
Description
CVE-2024-41184
Patched
In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.