The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade corosynclibUpgrade corosync-vqsim | Jul 4, 2025 | Mar 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade corosync-qdeviceUpgrade corosync-qnetdUpgrade corosync-debuginfoUpgrade spauseddUpgrade corosynclibUpgrade corosynclib-develUpgrade corosync | Jul 22, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade corosync | May 15, 2025 | Mar 22, 2025 |
| Oracle_linux | — | Upgrade corosynclibUpgrade corosyncUpgrade corosync-vqsim | May 26, 2025 | Mar 22, 2025 |
| Redhat_linux | — | Upgrade corosync-debuginfoNo solution existsUpgrade corosynclib-debuginfoUpgrade corosynclibUpgrade corosynclib-develUpgrade corosyncUpgrade corosync-debugsourceUpgrade corosync-vqsimUpgrade corosync-vqsim-debuginfo | May 15, 2025 | Mar 22, 2025 |
| Rocky_linux | — | Upgrade corosynclibUpgrade corosyncUpgrade corosync-vqsimUpgrade corosynclib-debuginfoUpgrade corosynclib-develUpgrade corosync-debugsourceUpgrade corosync-vqsim-debuginfoUpgrade corosync-debuginfo | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade libcpg4-32bitUpgrade corosync-qdeviceUpgrade libvotequorum8-32bitUpgrade corosync-qnetdUpgrade libcorosync_common4Upgrade libvotequorum8Upgrade libtotem_pg5Upgrade libcfg6-32bitUpgrade libcmap4Upgrade libquorum5Upgrade libquorum5-32bitUpgrade corosync-testagentsUpgrade libcpg4Upgrade libcfg6Upgrade libtotem_pg5-32bitUpgrade libcorosync-develUpgrade corosyncUpgrade libcorosync_common4-32bitUpgrade libsam4Upgrade libcmap4-32bitUpgrade libsam4-32bit | Dec 5, 2025 | Jun 1, 2025 |
| Ubuntu | — | Upgrade corosync | May 6, 2025 | Mar 22, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub