← Database

CVE-2025-30472

CRITICAL CVSS: 9.0 Published: 2025-03-22 Modified: 2026-06-17

Description

Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.

Affected Platforms

Corosync Corosync

Weakness Type

CWE-121, CWE-787

References