<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 16:45:03 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-30472</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-30472</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Corosync&lt;/p&gt;
&lt;p&gt;Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Corosync&lt;/p&gt;
&lt;p&gt;Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-30472</guid>
    </item>
    <item>
      <title>USN-7478-1 — corosync vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-7478-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync&lt;/p&gt;
&lt;p&gt;It was discovered that Corosync incorrectly handled certain large UDP
packets. If encryption is disabled, or an attacker knows the encryption
key, this issue could be used to cause Corosync to crash, resulting in a
denial of service.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync&lt;/p&gt;
&lt;p&gt;It was discovered that Corosync incorrectly handled certain large UDP
packets. If encryption is disabled, or an attacker knows the encryption
key, this issue could be used to cause Corosync to crash, resulting in a
denial of service.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-7478-1</guid>
    </item>
  </channel>
</rss>
