← Back

CVE-2026-35092

nvd nist
Published: Apr 1, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: secalert@redhat.com (Secondary)

Description

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.

Affected (6)

1 product
Corosync
2 products
Enterprise Linux
Openshift
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Redhat
Version 10.0
Version 7.0
Version 8.0
Version 9.0
Version 4.0

References (17)

Timeline

No history available yet.