TI-2026-27292 CVE-2026-35092 · GHSA-g4g9-h6f9-v5x2
Corosync: corosync: denial of service via integer overflow in join message validation
Priority MEDIUM 41
A flaw was found in Corosync.
Vulnerabilities
5 records
TI-2026-27291 CVE-2026-35091 · GHSA-hmg2-5h4j-37m9
Corosync: corosync: denial of service and information disclosure via crafted udp packet
Priority MEDIUM 43
A flaw was found in Corosync.
TI-2025-21772 CVE-2025-30472 · GHSA-4q2r-xgxr-vvqm
Stack-based buffer overflow in Corosync
Priority HIGH 76
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
TI-2018-01003 CVE-2018-1084 · GHSA-4gvp-pc33-4ccc
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
Priority LOW 38
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
TI-2013-00184 CVE-2013-0250 · GHSA-f3cv-gjqx-mcfh
The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not…
Priority LOW 28
The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet.