https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:01:02 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:13644 <p><strong>Affected:</strong> AlmaLinux:10: corosync, AlmaLinux:10: corosync-vqsim, AlmaLinux:10: corosynclib, AlmaLinux:10: corosynclib-devel</p> <p>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.</p> <p>Security Fix(es):</p> <p>* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: corosync, AlmaLinux:10: corosync-vqsim, AlmaLinux:10: corosynclib, AlmaLinux:10: corosynclib-devel</p> <p>The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.</p> <p>Security Fix(es):</p> <p>* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:13644 https://cve.radiocsirt.org/vuln/bdu:2026-12841 bdu:2026-12841 https://cve.radiocsirt.org/vuln/bdu:2026-12841 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/euvd-2026-357270 EUVD-2026-357270 https://cve.radiocsirt.org/vuln/euvd-2026-357270 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35091 <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents</p> <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35091 https://cve.radiocsirt.org/vuln/ghsa-hmg2-5h4j-37m9 <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.</p> <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-hmg2-5h4j-37m9 https://cve.radiocsirt.org/vuln/oesa-2026-1964 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: corosync</p> <p>This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script. Security Fix(es):</p> <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)</p> <p>A flaw was found in Corosync. An integer overflow vulnerability in Corosync&amp;apos;s join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: corosync</p> <p>This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script. Security Fix(es):</p> <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)</p> <p>A flaw was found in Corosync. An integer overflow vulnerability in Corosync&amp;apos;s join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1964 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10488-1 <p>corosync-3.1.10-4.1 on GA media</p> <p>corosync-3.1.10-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10488-1 https://cve.radiocsirt.org/vuln/rhsa-2026:14205 <p>corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet corosync: Corosync: Denial of Service via integer overflow in join message validation</p> <p>corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet corosync: Corosync: Denial of Service via integer overflow in join message validation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:14205 https://cve.radiocsirt.org/vuln/suse-su-2026:1394-1 <p>Security update for corosync</p> <p>Security update for corosync</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1394-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35091 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: corosync, Ubuntu:18.04:LTS: corosync, Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync, Ubuntu:25.10: corosync</p> <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: corosync, Ubuntu:18.04:LTS: corosync, Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync, Ubuntu:25.10: corosync</p> <p>A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35091 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1358 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (corosync) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (corosync) ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1358