UNKNOWNCVE-2026-35092
Corosync: corosync: denial of service via integer overflow in join message validation
Platform
linux
Component
corosync
A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.
How to fix
Actualice Corosync a la última versión disponible proporcionada por Red Hat. Asegúrese de que la configuración de Corosync no utilice los modos totemudp/totemudpu hasta que se aplique la actualización.
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free