Oracle Linux: CVE-2024-41184: ELSA-2025-0743: keepalived security update (MODERATE) (Multiple Advisories)

Oracle Linux: CVE-2024-41184: ELSA-2025-0743:keepalived security update (MODERATE) (Multiple Advisories)

Severity

7

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

07/18/2024

Created

01/31/2025

Added

01/29/2025

Modified

02/11/2025

Description

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user. A flaw was found in the keepalived package. An integer overflow occurs when incorrect arguments are passed. As a result, reading from an undefined address takes place.

Solution(s)

• oracle-linux-upgrade-keepalived

References

• https://attackerkb.com/topics/cve-2024-41184
• CVE - 2024-41184
• ELSA-2025-0743
• ELSA-2025-0917