keepalived

Keepalived is an open-source daemon for VRRP-based high-availability and health checks. A recent thread on WindowsForum.com covers CVE-2024-41184, an integer-overflow bug in Keepalived's VRRP ipset parsing code triggered by an empty ipset name in configuration. This flaw can cause undefined reads or crashes. The patch adds strict validation so malformed or empty ipset names result in a configuration error instead of unsafe memory arithmetic. The discussion provides a patch guide for this specific vulnerability, focusing on the ipset parsing fix.