https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:37:08.546612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:13644 ALSA-2026:13644 — Moderate: corosync security update 2026-10-03T21:37:09.012841+00:00

Affected: AlmaLinux:10: corosync, AlmaLinux:10: corosync-vqsim, AlmaLinux:10: corosynclib, AlmaLinux:10: corosynclib-devel

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-12841 bdu:2026-12841 2026-10-03T21:37:09.012916+00:00 bdu:2026-12841 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 certfr-2026-avi-1032 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T21:37:09.012935+00:00 certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/euvd-2026-357270 EUVD-2026-357270 2026-10-03T21:37:09.012951+00:00 EUVD-2026-357270 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35091 fkie_cve-2026-35091 2026-10-03T21:37:09.012962+00:00

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

 https://cve.radiocsirt.org/vuln/ghsa-hmg2-5h4j-37m9 GHSA-hmg2-5h4j-37m9 2026-10-03T21:37:09.012984+00:00

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.

 https://cve.radiocsirt.org/vuln/oesa-2026-1964 OESA-2026-1964 — corosync security update 2026-10-03T21:37:09.013001+00:00

Affected: openEuler:20.03-LTS-SP4: corosync

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script. Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10488-1 openSUSE-SU-2026:10488-1 — corosync-3.1.10-4.1 on GA media 2026-10-03T21:37:09.013029+00:00

corosync-3.1.10-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:14205 RHSA-2026:14205 — Red Hat Security Advisory: corosync security update 2026-10-03T21:37:09.013047+00:00

corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet corosync: Corosync: Denial of Service via integer overflow in join message validation

 https://cve.radiocsirt.org/vuln/suse-su-2026:1394-1 SUSE-SU-2026:1394-1 — Security update for corosync 2026-10-03T21:37:09.013066+00:00

Security update for corosync

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35091 UBUNTU-CVE-2026-35091 2026-10-03T21:37:09.013080+00:00

Affected: Ubuntu:16.04:LTS: corosync, Ubuntu:18.04:LTS: corosync, Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync, Ubuntu:25.10: corosync

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1358 WID-SEC-W-2026-1358 — Red Hat Enterprise Linux (corosync): Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T21:37:09.013108+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (corosync) ausnutzen, um einen Denial of Service Angriff durchzuführen.