https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T16:45:20.831681+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-30472 CVE-2025-30472 2026-10-11T16:45:20.834032+00:00

Affected: Corosync

Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.

 https://vulnerability.circl.lu/vuln/usn-7478-1 USN-7478-1 — corosync vulnerability 2026-10-11T16:45:20.834104+00:00

Affected: Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync

It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled, or an attacker knows the encryption key, this issue could be used to cause Corosync to crash, resulting in a denial of service.