CVE-2026-35092 in Corosync
Сводка (Английский)
A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Ответственный
redhat
Резервировать
01.04.2026
Раскрытие
01.04.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354661 | Corosync UDP повреждение памяти | 190 | Не определено | Не определено | CVE-2026-35092 |