Approved changes feed: RSS · Atom
cpe:2.3:a:corosync:corosync:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Corosync (5617d2e7-e6ef-5161-9fef-365458da2eb5) |
|---|---|
| Product | Corosync (0dac3a12-6915-5eb4-98d4-0ae2ede62761) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/corosync/corosync |
purl2cpe | 2026-11-03 09:58:40.826736 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35092 |
vulnerable | 2026-06-08 07:59:13.638534 |
Corosync: corosync: denial of service via integer overflow in join message validation
HIGH (7.5)
A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.
Published: 2026-04-01T13:18:55.551Z
Updated: 2026-08-21T12:15:35.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35091 |
vulnerable | 2026-06-08 07:59:13.636307 |
Corosync: corosync: denial of service and information disclosure via crafted udp packet
HIGH (8.2)
A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents
Published: 2026-04-01T13:18:53.738Z
Updated: 2026-08-21T12:15:34.109Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.