https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:49:27.353686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:13644 ALSA-2026:13644 — Moderate: corosync security update 2026-10-04T07:49:27.418227+00:00

Affected: AlmaLinux:10: corosync, AlmaLinux:10: corosync-vqsim, AlmaLinux:10: corosynclib, AlmaLinux:10: corosynclib-devel

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-12842 bdu:2026-12842 2026-10-04T07:49:27.418480+00:00 bdu:2026-12842 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 certfr-2026-avi-1032 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T07:49:27.418504+00:00 certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/euvd-2026-357271 EUVD-2026-357271 2026-10-04T07:49:27.418521+00:00 EUVD-2026-357271 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35092 fkie_cve-2026-35092 2026-10-04T07:49:27.418532+00:00

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.

 https://cve.radiocsirt.org/vuln/ghsa-g4g9-h6f9-v5x2 GHSA-g4g9-h6f9-v5x2 2026-10-04T07:49:27.418567+00:00

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.

 https://cve.radiocsirt.org/vuln/oesa-2026-1964 OESA-2026-1964 — corosync security update 2026-10-04T07:49:27.418583+00:00

Affected: openEuler:20.03-LTS-SP4: corosync

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script. Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20505-1 openSUSE-SU-2026:20505-1 — Security update for corosync 2026-10-04T07:49:27.418636+00:00

Security update for corosync

 https://cve.radiocsirt.org/vuln/rhsa-2026:14205 RHSA-2026:14205 — Red Hat Security Advisory: corosync security update 2026-10-04T07:49:27.418680+00:00

corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet corosync: Corosync: Denial of Service via integer overflow in join message validation

 https://cve.radiocsirt.org/vuln/suse-su-2026:1394-1 SUSE-SU-2026:1394-1 — Security update for corosync 2026-10-04T07:49:27.418724+00:00

Security update for corosync

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35092 UBUNTU-CVE-2026-35092 2026-10-04T07:49:27.418756+00:00

Affected: Ubuntu:16.04:LTS: corosync, Ubuntu:18.04:LTS: corosync, Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync, Ubuntu:25.10: corosync

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1358 WID-SEC-W-2026-1358 — Red Hat Enterprise Linux (corosync): Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T07:49:27.418815+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (corosync) ausnutzen, um einen Denial of Service Angriff durchzuführen.