Every CVE Search/ Get API key

CVE-2024-41184

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer...

9.8 CriticalFix availableDisputed

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.62%Up 0.6 points since Jul 18, 2024
90%50%10%1%

What each source reports

CVE List Score used 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
CVE-2024-41184
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2024-38966 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
EUVD-2024-38966
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-343m-v77v-mv8r 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer...

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
GHSA-343m-v77v-mv8r
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
CVE-2024-41184
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
OSV 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
CVE-2024-41184
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-41184 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
DEBIAN-CVE-2024-41184
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVRHSA-2025:0743 6.3

Red Hat Security Advisory: keepalived security update

Record
RHSA-2025:0743
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:0917 6.3

Red Hat Security Advisory: keepalived security update

Record
RHSA-2025:0917
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:9775 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates

Record
RHSA-2025:9775
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:0917 6.3

Moderate: keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es):

  • keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:0917
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2024-41184 9.8

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
UBUNTU-CVE-2024-41184
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:0743 No score

Moderate: keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es):

  • keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:0743
Updated
2026-11-02
OSVALSA-2025:0917 No score

Moderate: keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es):

  • keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:0917
Updated
2026-11-02
OSVAZL-43419 No score

CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
AZL-43419
Updated
2026-11-05
OSVAZL-43423 No score

CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

Record
AZL-43423
Updated
2026-11-02
OSVopenSUSE-SU-2024:14332-1 No score

keepalived-2.3.1+git59.b6681f98-1.1 on GA media

These are all security issues fixed in the keepalived-2.3.1+git59.b6681f98-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14332-1
Updated
2026-11-02
OSVRLSA-2025:0743 No score

Moderate: keepalived security update

The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover.

Security Fix(es):

  • keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:0743
Updated
2026-11-02
OSVSUSE-SU-2024:3031-1 No score

Security update for keepalived

This update for keepalived fixes the following issues:

  • CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
Record
SUSE-SU-2024:3031-1
Updated
2026-11-02
OSVSUSE-SU-2024:3633-1 No score

Security update for keepalived

This update for keepalived fixes the following issues:

  • CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
Record
SUSE-SU-2024:3633-1
Updated
2026-11-02
OSVSUSE-SU-2024:3634-1 No score

Security update for keepalived

This update for keepalived fixes the following issues:

  • CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
Record
SUSE-SU-2024:3634-1
Updated
2026-11-02
OSVSUSE-SU-2024:3658-1 No score

Security update for keepalived

This update for keepalived fixes the following issues:

  • CVE-2024-41184: fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
Record
SUSE-SU-2024:3658-1
Updated
2026-11-02
OSVSUSE-SU-2025:20039-1 No score

Security update for keepalived

This update for keepalived fixes the following issues:

  • CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
Record
SUSE-SU-2025:20039-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
keepalived
AlmaLinux:8
 before 2.1.5-10.el8_10
2.1.5-10.el8_10
keepalived
AlmaLinux:9
 before 2.2.8-4.el9_5
2.2.8-4.el9_5
keepalived
Azure Linux:3
 before 2.3.1-1
2.3.1-1
keepalived
Azure Linux:2
 before 2.3.1-1
2.3.1-1
keepalived
Debian:12
 All versions, plus listed versions
1:2.2.7-11:2.2.8-11:2.3.1-11:2.3.2-11:2.3.3-11:2.3.4-1
 None known
keepalived
Debian:13
 before 1:2.3.2-1
1:2.3.2-1
keepalived
Debian:14
 before 1:2.3.2-1
1:2.3.2-1
keepalived
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.5-10.el8_10
0:2.1.5-10.el8_10
keepalived-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.5-10.el8_10
0:2.1.5-10.el8_10
keepalived-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.5-10.el8_10
0:2.1.5-10.el8_10
Show 96 moreShow less
Affected packages
PackageAffectedFixed
keepalived
Red Hat:enterprise_linux:9::appstream
 before 0:2.2.8-4.el9_5
0:2.2.8-4.el9_5
keepalived-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.2.8-4.el9_5
0:2.2.8-4.el9_5
keepalived-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.2.8-4.el9_5
0:2.2.8-4.el9_5
ceph
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-base
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-fuse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mib
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mon-client-nvmeof-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-resource-agents
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-selinux
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephadm
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephadm-ansible
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 1:4.1.4-1.el9cp
1:4.1.4-1.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
cephfs-top
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-daemon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-proxy2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs-proxy2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
liboath
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
liboath-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
libpskc-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
librados-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librados2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradospp-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradosstriper1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
oath-toolkit
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oath-toolkit-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
oathtool-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pam_oath-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
pskctool-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 0:2.6.12-1.el9cp
0:2.6.12-1.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-cephfs
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rados
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rgw
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-nbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 8 CVEs
 before 2:19.2.1-222.el9cp
2:19.2.1-222.el9cp
keepalived
Rocky Linux:8
 before 0:2.1.5-10.el8_10
0:2.1.5-10.el8_10
keepalived
Rocky Linux:9
 before 0:2.2.8-4.el9_5
0:2.2.8-4.el9_5
keepalived
SUSE:Linux Enterprise Micro 5.3
 before 2.2.2-150400.3.10.1
2.2.2-150400.3.10.1
keepalived
SUSE:Linux Enterprise Micro 5.4
 before 2.2.2-150400.3.10.1
2.2.2-150400.3.10.1
keepalived
SUSE:Linux Enterprise High Availability Extension 15 SP4
 before 2.2.2-150400.3.10.1
2.2.2-150400.3.10.1
keepalived
SUSE:Linux Enterprise High Availability Extension 15 SP6
 before 2.2.8-150600.3.5.1
2.2.8-150600.3.5.1
keepalived
openSUSE:Leap 15.6
 before 2.2.8-150600.3.5.1
2.2.8-150600.3.5.1
keepalived
SUSE:Linux Enterprise Micro 5.5
 before 2.2.2-150500.8.5.1
2.2.2-150500.8.5.1
keepalived
SUSE:Linux Enterprise High Availability Extension 15 SP5
 before 2.2.2-150500.8.5.1
2.2.2-150500.8.5.1
keepalived
openSUSE:Leap Micro 5.5
 before 2.2.2-150500.8.5.1
2.2.2-150500.8.5.1
keepalived
openSUSE:Leap 15.5
 before 2.2.2-150500.8.5.1
2.2.2-150500.8.5.1
keepalived
SUSE:Linux Enterprise High Availability Extension 15 SP2
 before 2.0.19-150100.3.9.1
2.0.19-150100.3.9.1
keepalived
SUSE:Linux Enterprise High Availability Extension 15 SP3
 before 2.0.19-150100.3.9.1
2.0.19-150100.3.9.1
keepalived
SUSE:Linux Micro 6.0
 before 2.2.8-2.1
2.2.8-2.1
keepalived
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:1.2.7-1ubuntu11:1.2.7-1ubuntu1+esm1
 None known
keepalived
Ubuntu:16.04:LTS
 All versions, plus listed versions
1:1.2.19-11:1.2.19-1ubuntu0.11:1.2.19-1ubuntu0.21:1.2.24-1ubuntu0.16.04.11:1.2.24-1ubuntu0.16.04.2
 None known
keepalived
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:1.3.2-1build11:1.3.9-11:1.3.9-1build11:1.3.9-1ubuntu0.18.04.11:1.3.9-1ubuntu0.18.04.21:1.3.9-1ubuntu0.18.04.3
 None known
keepalived
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:2.0.10-1build21:2.0.19-1build11:2.0.19-21:2.0.19-2ubuntu0.11:2.0.19-2ubuntu0.2
 None known
keepalived
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:2.1.5-0.2ubuntu11:2.2.4-0.21:2.2.4-0.2build1
 None known
keepalived
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:2.2.8-11:2.2.8-1build11:2.2.8-1build2
 None known
keepalived
Ubuntu:25.10
 All versions, plus listed versions
1:2.3.2-11:2.3.3-1
 None known
keepalived
Ubuntu:26.10
 All versions, plus listed versions
1:2.3.4-11:2.3.4-1build11:2.3.4-1build2
 None known
keepalived
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:2.3.3-11:2.3.4-1
 None known
keepalived
openSUSE:Tumbleweed
 before 2.3.1+git59.b6681f98-1.1
2.3.1+git59.b6681f98-1.1

History

History
RecordedChangedSources
affected
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-41184 is a critical vulnerability (CVSS 9.8) in Acassen Keepalived, published July 18, 2024. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 50th percentile. Fixed in keepalived 2.1.5-10.el8_10.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 175 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open