The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade corosynclibUpgrade corosync-vqsim | Jul 4, 2025 | Mar 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade corosync-debuginfoUpgrade corosync-qnetdUpgrade corosync-qdeviceUpgrade corosynclibUpgrade corosyncUpgrade corosynclib-develUpgrade spausedd | Jul 22, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade corosync | May 15, 2025 | Mar 22, 2025 |
| Oracle_linux | — | Upgrade corosync-vqsimUpgrade corosynclibUpgrade corosync | May 26, 2025 | Mar 22, 2025 |
| Redhat_linux | — | Upgrade corosync-vqsim-debuginfoUpgrade corosync-vqsimUpgrade corosyncUpgrade corosync-debugsourceUpgrade corosynclib-debuginfoNo solution existsUpgrade corosync-debuginfoUpgrade corosynclib-develUpgrade corosynclib | May 15, 2025 | Mar 22, 2025 |
| Rocky_linux | — | Upgrade corosyncUpgrade corosynclibUpgrade corosynclib-debuginfoUpgrade corosync-vqsimUpgrade corosync-debuginfoUpgrade corosynclib-develUpgrade corosync-debugsourceUpgrade corosync-vqsim-debuginfo | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade libcmap4Upgrade libquorum5Upgrade libcfg6-32bitUpgrade libcpg4-32bitUpgrade libvotequorum8-32bitUpgrade libcorosync_common4Upgrade libvotequorum8Upgrade libtotem_pg5Upgrade corosync-qdeviceUpgrade corosync-qnetdUpgrade libcmap4-32bitUpgrade libtotem_pg5-32bitUpgrade libsam4-32bitUpgrade corosyncUpgrade libquorum5-32bitUpgrade libcorosync-develUpgrade libsam4Upgrade libcpg4Upgrade libcfg6Upgrade corosync-testagentsUpgrade libcorosync_common4-32bit | Dec 5, 2025 | Jun 1, 2025 |
| Ubuntu | — | Upgrade corosync | May 6, 2025 | Mar 22, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub