https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 14:05:07 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-81666 <p>An integer overflow was found in Corosync&#39;s handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an out-of-bounds memory access that crashes the Corosync daemon. This results in a denial of service for the affected cluster node. The overflow does not occur on 64-bit systems, where the length calculation is correctly performed in 64-bit arithmetic.</p> <p>An integer overflow was found in Corosync&#39;s handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an out-of-bounds memory access that crashes the Corosync daemon. This results in a denial of service for the affected cluster node. The overflow does not occur on 64-bit systems, where the length calculation is correctly performed in 64-bit arithmetic.</p> https://db.gcve.eu/vuln/fkie_cve-2026-81666 https://db.gcve.eu/vuln/ghsa-8297-6g53-8gp5 <p>An integer overflow was found in Corosync&#39;s handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an out-of-bounds memory access that crashes the Corosync daemon. This results in a denial of service for the affected cluster node. The overflow does not occur on 64-bit systems, where the length calculation is correctly performed in 64-bit arithmetic.</p> <p>An integer overflow was found in Corosync&#39;s handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an out-of-bounds memory access that crashes the Corosync daemon. This results in a denial of service for the affected cluster node. The overflow does not occur on 64-bit systems, where the length calculation is correctly performed in 64-bit arithmetic.</p> https://db.gcve.eu/vuln/ghsa-8297-6g53-8gp5 https://db.gcve.eu/vuln/opensuse-su-2026:11715-1 <p>corosync-3.1.10-5.1 on GA media</p> <p>corosync-3.1.10-5.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:11715-1 https://db.gcve.eu/vuln/suse-su-2026:23850-1 <p>Security update for corosync</p> <p>Security update for corosync</p> https://db.gcve.eu/vuln/suse-su-2026:23850-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-81666 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: corosync, Ubuntu:18.04:LTS: corosync, Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync, Ubuntu:26.04:LTS: corosync</p> <p>An integer overflow was found in Corosync&#39;s handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an out-of-bounds memory access that crashes the Corosync daemon. This results in a denial of service for the affected cluster node. The overflow does not occur on 64-bit systems, where the length calculation is correctly performed in 64-bit arithmetic.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: corosync, Ubuntu:18.04:LTS: corosync, Ubuntu:20.04:LTS: corosync, Ubuntu:22.04:LTS: corosync, Ubuntu:24.04:LTS: corosync, Ubuntu:26.04:LTS: corosync</p> <p>An integer overflow was found in Corosync&#39;s handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an out-of-bounds memory access that crashes the Corosync daemon. This results in a denial of service for the affected cluster node. The overflow does not occur on 64-bit systems, where the length calculation is correctly performed in 64-bit arithmetic.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-81666