Corosync

5 CVEs across 1 Corosync products. Browse Corosync vulnerabilities, severities, and proof-of-concept exploits.

Corosync products with known CVEs

ProductCVEs
Corosync5
Corosync CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-35092High7.52026-04-01A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send…
CVE-2026-35091High8.22026-04-01A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity c…
CVE-2025-30472Critical9.02025-03-22Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in ex…
CVE-2018-1084High7.52018-04-12corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
CVE-2013-02502014-06-06The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a…