Corosync - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2026-04-01.

Products

• Corosync - 5 CVEs

Newest CVEs of Corosync

• CVE-2026-35092 - CVSS 7.5 (high), 2026-04-01: A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send…
• CVE-2026-35091 - CVSS 8.2 (high), 2026-04-01: A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity…
• CVE-2025-30472 - CVSS 9.8 (critical), 2025-03-22: Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in…
• CVE-2018-1084 - CVSS 7.5 (high), 2018-04-12: corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
• CVE-2013-0250 - CVSS 5 (medium), 2014-06-06: The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause…