In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user.

The remote NewStart CGSL host, running version MAIN 7.02, has keepalived packages installed that are affected by a vulnerability:

  - In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can     occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the     user. (CVE-2024-41184)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9775 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages include numerous enhancements, security and bug fixes, and known issues. Space     precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph     Storage Release Notes for information on the most significant of these changes:

    https://docs.redhat.com/en/documentation/red_hat_ceph_storage/8/html/8.1_release_notes

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0015 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-41184:
    In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can     occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the     user.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0917 advisory.

    * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can     occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the     user. (CVE-2024-41184)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0743 advisory.

    * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0917 advisory.

    * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0917 advisory.

    [2.2.8-3]
    - Validate vrrp ipset names for CVE-2024-41184       Resolves: RHEL-49557

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0917 advisory.

    The keepalived utility provides simple and robust facilities for load balancing and high availability. The     load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module     providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically     and adaptively maintain and manage a load balanced server pool according to the health of the servers.
    Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability     with director failover.

    Security Fix(es):

    * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:0743 advisory.

    * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-0743 advisory.

    [2.1.5-10]
    - CVE-2024-41184       Resolves: RHEL-49561

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0743 advisory.

    The keepalived utility provides simple and robust facilities for load balancing and high availability. The     load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module     providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically     and adaptively maintain and manage a load balanced server pool according to the health of the servers.
    Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability     with director failover.

    Security Fix(es):

    * keepalived: Integer overflow vulnerability in vrrp_ipsets_handler (CVE-2024-41184)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3658-1 advisory.

    - CVE-2024-41184: fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:3634-1 advisory.

    - CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:3633-1 advisory.

    -  CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of keepalived installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41184 advisory.

  - In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can     occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the     user. (CVE-2024-41184)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:3031-1 advisory.

    - CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the keepalived package has been released.

ID	Name	Product	Family	Severity
242698	NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0171)	Nessus	NewStart CGSL Local Security Checks	critical
240647	RHEL 9 : Red Hat Ceph Storage 8.1 (RHSA-2025:9775)	Nessus	Red Hat Local Security Checks	medium
238014	NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0079)	Nessus	NewStart CGSL Local Security Checks	critical
236358	Alibaba Cloud Linux 3 : 0015: keepalived (ALINUX3-SA-2025:0015)	Nessus	Alibaba Cloud Linux Local Security Checks	critical
232868	RockyLinux 9 : keepalived (RLSA-2025:0917)	Nessus	Rocky Linux Local Security Checks	critical
228336	Linux Distros Unpatched Vulnerability : CVE-2024-41184	Nessus	Misc.	critical
216308	RockyLinux 8 : keepalived (RLSA-2025:0743)	Nessus	Rocky Linux Local Security Checks	critical
215127	AlmaLinux 9 : keepalived (ALSA-2025:0917)	Nessus	Alma Linux Local Security Checks	critical
214967	Oracle Linux 9 : keepalived (ELSA-2025-0917)	Nessus	Oracle Linux Local Security Checks	critical
214931	RHEL 9 : keepalived (RHSA-2025:0917)	Nessus	Red Hat Local Security Checks	critical
214764	AlmaLinux 8 : keepalived (ALSA-2025:0743)	Nessus	Alma Linux Local Security Checks	critical
214729	Oracle Linux 8 : keepalived (ELSA-2025-0743)	Nessus	Oracle Linux Local Security Checks	critical
214709	RHEL 8 : keepalived (RHSA-2025:0743)	Nessus	Red Hat Local Security Checks	critical
209220	SUSE SLES15 Security Update : keepalived (SUSE-SU-2024:3658-1)	Nessus	SuSE Local Security Checks	critical
209079	SUSE SLES15 / openSUSE 15 Security Update : keepalived (SUSE-SU-2024:3634-1)	Nessus	SuSE Local Security Checks	critical
209073	SUSE SLES15 / openSUSE 15 Security Update : keepalived (SUSE-SU-2024:3633-1)	Nessus	SuSE Local Security Checks	critical
207522	CBL Mariner 2.0 Security Update: keepalived (CVE-2024-41184)	Nessus	MarinerOS Local Security Checks	critical
206265	SUSE SLES15 Security Update : keepalived (SUSE-SU-2024:3031-1)	Nessus	SuSE Local Security Checks	critical
205577	Photon OS 5.0: Keepalived PHSA-2024-5.0-0347	Nessus	PhotonOS Local Security Checks	critical
205576	Photon OS 4.0: Keepalived PHSA-2024-4.0-0667	Nessus	PhotonOS Local Security Checks	critical
205573	Photon OS 3.0: Keepalived PHSA-2024-3.0-0781	Nessus	PhotonOS Local Security Checks	critical

Detections

Analytics

CVE-2024-41184

critical

Tenable Plugins

critical

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical