https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:02:24 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:39322 <p><strong>Affected:</strong> AlmaLinux:8: pacemaker, AlmaLinux:8: pacemaker-cli, AlmaLinux:8: pacemaker-cluster-libs, AlmaLinux:8: pacemaker-cts, AlmaLinux:8: pacemaker-doc, AlmaLinux:8: pacemaker-libs, AlmaLinux:8: pacemaker-libs-devel, AlmaLinux:8: pacemaker-nagios-plugins-metadata, AlmaLinux:8: pacemaker-remote, AlmaLinux:8: pacemaker-schemas and 1 more</p> <p>The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.</p> <p>Security Fix(es):</p> <p>* pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: pacemaker, AlmaLinux:8: pacemaker-cli, AlmaLinux:8: pacemaker-cluster-libs, AlmaLinux:8: pacemaker-cts, AlmaLinux:8: pacemaker-doc, AlmaLinux:8: pacemaker-libs, AlmaLinux:8: pacemaker-libs-devel, AlmaLinux:8: pacemaker-nagios-plugins-metadata, AlmaLinux:8: pacemaker-remote, AlmaLinux:8: pacemaker-schemas and 1 more</p> <p>The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.</p> <p>Security Fix(es):</p> <p>* pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:39322 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/euvd-2026-357261 EUVD-2026-357261 https://cve.radiocsirt.org/vuln/euvd-2026-357261 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10649 <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.</p> <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10649 https://cve.radiocsirt.org/vuln/ghsa-94r4-qcg7-69qj <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.</p> <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.</p> https://cve.radiocsirt.org/vuln/ghsa-94r4-qcg7-69qj https://cve.radiocsirt.org/vuln/oesa-2026-2937 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: pacemaker</p> <p>Pacemaker is an advanced, scalable High-Availability cluster resource manager. Security Fix(es):</p> <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.(CVE-2026-10649)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: pacemaker</p> <p>Pacemaker is an advanced, scalable High-Availability cluster resource manager. Security Fix(es):</p> <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.(CVE-2026-10649)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2937 https://cve.radiocsirt.org/vuln/rhsa-2026:39322 <p>pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression</p> <p>pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression</p> https://cve.radiocsirt.org/vuln/rhsa-2026:39322 https://cve.radiocsirt.org/vuln/rhsa-2026:41041 <p>pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression</p> <p>pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression</p> https://cve.radiocsirt.org/vuln/rhsa-2026:41041 https://cve.radiocsirt.org/vuln/rlsa-2026:39322 <p><strong>Affected:</strong> Rocky Linux:8: pacemaker</p> <p>The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.</p> <p>Security Fix(es):</p> <p>* pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: pacemaker</p> <p>The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.</p> <p>Security Fix(es):</p> <p>* pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:39322 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10649 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pacemaker, Ubuntu:18.04:LTS: pacemaker, Ubuntu:20.04:LTS: pacemaker, Ubuntu:22.04:LTS: pacemaker, Ubuntu:24.04:LTS: pacemaker, Ubuntu:25.10: pacemaker, Ubuntu:26.04:LTS: pacemaker</p> <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pacemaker, Ubuntu:18.04:LTS: pacemaker, Ubuntu:20.04:LTS: pacemaker, Ubuntu:22.04:LTS: pacemaker, Ubuntu:24.04:LTS: pacemaker, Ubuntu:25.10: pacemaker, Ubuntu:26.04:LTS: pacemaker</p> <p>A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10649 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2345 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2345