Every CVE Search/ Get API key

CVE-2026-35091

Corosync: corosync: denial of service and information disclosure via crafted udp packet

8.2 HighFix available

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

0.88%Up 0.8 points since Apr 2, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.2

Corosync: corosync: denial of service and information disclosure via crafted udp packet

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Record
CVE-2026-35091
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-253
Updated
2026-11-02
EUVDEUVD-2026-17879 8.2

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Record
EUVD-2026-17879
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-hmg2-5h4j-37m9 8.2

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value...

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.

Record
GHSA-hmg2-5h4j-37m9
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-253
Updated
2026-11-02
NVD 8.2

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Record
CVE-2026-35091
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-253
Updated
2026-11-02
OSVDEBIAN-CVE-2026-35091 8.2

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Record
DEBIAN-CVE-2026-35091
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1964 8.2

corosync security update

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script.

Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

Record
OESA-2026-1964
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
Show 41 moreShow less
OSVOESA-2026-1965 8.2

corosync security update

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script.

Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

Record
OESA-2026-1965
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1966 8.2

corosync security update

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script.

Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

Record
OESA-2026-1966
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2046 8.2

corosync security update

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script.

Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

Record
OESA-2026-2046
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2047 8.2

corosync security update

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script.

Security Fix(es):

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.(CVE-2026-35091)

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.(CVE-2026-35092)

Record
OESA-2026-2047
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13644 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:13644
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13657 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:13657
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:13673 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:13673
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14205 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14205
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14210 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14210
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14211 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14211
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14212 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14212
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14213 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14213
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14214 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14214
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14215 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14215
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:14216 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:14216
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:19043 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:19043
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:19200 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:19200
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:20916 8.2

Red Hat Security Advisory: corosync security update

Record
RHSA-2026:20916
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:13644 8.2

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:13644
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:13657 8.2

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:13657
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:13673 8.2

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:13673
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:19043 8.2

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19043
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:19200 8.2

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19200
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-35091 8.2

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Record
UBUNTU-CVE-2026-35091
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:13644 No score

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:13644
Updated
2026-11-02
OSVALSA-2026:13657 No score

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:13657
Updated
2026-11-02
OSVALSA-2026:13673 No score

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:13673
Updated
2026-11-02
OSVALSA-2026:19043 No score

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19043
Updated
2026-11-02
OSVALSA-2026:19200 No score

Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software.

Security Fix(es):

  • corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
  • corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19200
Updated
2026-11-02
OSVAZL-81981 No score

CVE-2026-35091 affecting package corosync 3.0.4-4

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents

Record
AZL-81981
Updated
2026-11-05
OSVCLSA-2026-1776435617 No score

corosync: Fix of 2 CVEs

  • CVE-2026-35091: fix incorrect return value in check_memb_commit_token_sanity allowing DoS via crafted memb_commit_token packet
  • CVE-2026-35092: fix integer overflow in check_memb_join_sanity allowing bypass of length validation via crafted memb_join packet
Record
CLSA-2026-1776435617
Updated
2026-11-02
OSVCLSA-2026-1777742234 No score

corosync: Fix of 2 CVEs

  • CVE-2026-35091: fix incorrect return value in check_memb_commit_token_sanity allowing DoS via crafted memb_commit_token packet
  • CVE-2026-35092: fix integer overflow in check_memb_join_sanity allowing bypass of length validation via crafted memb_join packet
Record
CLSA-2026-1777742234
Updated
2026-11-02
OSVCLSA-2026-1792591710 No score

corosync: Fix of 4 CVEs

  • CVE-2025-30472: stack buffer overflow in orf_token_endian_convert()
  • CVE-2026-35091: out-of-bounds read via check_memb_commit_token_sanity()
  • CVE-2026-35092: integer overflow in check_memb_join_sanity()
  • CVE-2026-81665: heap buffer overflow in totempg_deliver_fn()
Record
CLSA-2026-1792591710
Updated
2026-11-02
OSVCLSA-2026-1792622946 No score

corosync: Fix of 4 CVEs

  • CVE-2025-30472: stack buffer overflow in orf_token_endian_convert()
  • CVE-2026-35091: out-of-bounds read via check_memb_commit_token_sanity()
  • CVE-2026-35092: integer overflow in check_memb_join_sanity()
  • CVE-2026-81665: heap buffer overflow in totempg_deliver_fn()
Record
CLSA-2026-1792622946
Updated
2026-11-02
OSVMGASA-2026-0313 No score

Updated corosync and libqb packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Denial of service and information disclosure via crafted udp packet. (CVE-2026-35091) Denial of service via integer overflow in join message validation. (CVE-2026-35092) Additionally, libqb solves a missing runtime dependency on qb-blackbox.

Record
MGASA-2026-0313
Updated
2026-11-02
OSVopenSUSE-SU-2026:10488-1 No score

corosync-3.1.10-4.1 on GA media

These are all security issues fixed in the corosync-3.1.10-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10488-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20505-1 No score

Security update for corosync

This update for corosync fixes the following issues:

  • CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299).
  • CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
Record
openSUSE-SU-2026:20505-1
Updated
2026-11-02
OSVSUSE-SU-2026:1394-1 No score

Security update for corosync

This update for corosync fixes the following issues:

  • CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299).
  • CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
Record
SUSE-SU-2026:1394-1
Updated
2026-11-02
OSVSUSE-SU-2026:21224-1 No score

Security update for corosync

This update for corosync fixes the following issues:

  • CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299).
  • CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
Record
SUSE-SU-2026:21224-1
Updated
2026-11-02
OSVSUSE-SU-2026:21285-1 No score

Security update for corosync

This update for corosync fixes the following issues:

  • CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299).
  • CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).
Record
SUSE-SU-2026:21285-1
Updated
2026-11-02
OSVUSN-8170-1 No score

corosync vulnerabilities

It was discovered that Corosync incorrectly handled the membership commit token validity check. A remote attacker could use this issue to cause Corosync to crash, resulting in a denial of service, or to possibly obtain a small quantity of sensitive information. (CVE-2026-35091)

It was discovered that Corosync incorrectly handled join message validation. A remote attacker could possibly use this issue to cause Corosync to crash, resulting in a denial of service. (CVE-2026-35092)

Record
USN-8170-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
corosync
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.9-2.el10_1.1
3.1.9-2.el10_1.1
corosync-vqsim
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.9-2.el10_1.1
3.1.9-2.el10_1.1
corosynclib
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.9-2.el10_1.1
3.1.9-2.el10_1.1
corosynclib-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.9-2.el10_1.1
3.1.9-2.el10_1.1
corosync
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.1.8-1.el8_10.1
3.1.8-1.el8_10.1
corosync-vqsim
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.1.8-1.el8_10.1
3.1.8-1.el8_10.1
corosynclib
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.1.8-1.el8_10.1
3.1.8-1.el8_10.1
corosynclib-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.1.8-1.el8_10.1
3.1.8-1.el8_10.1
spausedd
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.1.8-1.el8_10.1
3.1.8-1.el8_10.1
corosync
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_7.1
3.1.9-2.el9_7.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
corosync-vqsim
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_7.1
3.1.9-2.el9_7.1
corosynclib
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_7.1
3.1.9-2.el9_7.1
corosynclib-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_7.1
3.1.9-2.el9_7.1
corosync
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.10-1.el10_2.1
3.1.10-1.el10_2.1
corosync-vqsim
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.10-1.el10_2.1
3.1.10-1.el10_2.1
corosynclib
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.10-1.el10_2.1
3.1.10-1.el10_2.1
corosynclib-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 3.1.10-1.el10_2.1
3.1.10-1.el10_2.1
corosync
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.10-1.el9_8.1
3.1.10-1.el9_8.1
corosync-vqsim
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.10-1.el9_8.1
3.1.10-1.el9_8.1
corosynclib
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.10-1.el9_8.1
3.1.10-1.el9_8.1
corosynclib-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 3.1.10-1.el9_8.1
3.1.10-1.el9_8.1
corosync
Azure Linux:3
 through 3.0.4-4 None known
corosync
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.1.7-1.el9.tuxcare.els2
3.1.7-1.el9.tuxcare.els2
corosync-vqsim
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.1.7-1.el9.tuxcare.els2
3.1.7-1.el9.tuxcare.els2
corosynclib
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.1.7-1.el9.tuxcare.els2
3.1.7-1.el9.tuxcare.els2
corosynclib-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 3.1.7-1.el9.tuxcare.els2
3.1.7-1.el9.tuxcare.els2
corosync
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_6.tuxcare.els1
3.1.9-2.el9_6.tuxcare.els1
corosync-vqsim
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_6.tuxcare.els1
3.1.9-2.el9_6.tuxcare.els1
corosynclib
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_6.tuxcare.els1
3.1.9-2.el9_6.tuxcare.els1
corosynclib-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 3.1.9-2.el9_6.tuxcare.els1
3.1.9-2.el9_6.tuxcare.els1
corosync
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 3.1.0-3.el8_4.1.tuxcare.els1
3.1.0-3.el8_4.1.tuxcare.els1
corosync-vqsim
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 3.1.0-3.el8_4.1.tuxcare.els1
3.1.0-3.el8_4.1.tuxcare.els1
corosynclib
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 3.1.0-3.el8_4.1.tuxcare.els1
3.1.0-3.el8_4.1.tuxcare.els1
corosynclib-devel
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 3.1.0-3.el8_4.1.tuxcare.els1
3.1.0-3.el8_4.1.tuxcare.els1
spausedd
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 3.1.0-3.el8_4.1.tuxcare.els1
3.1.0-3.el8_4.1.tuxcare.els1
corosync
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 3.1.5-1.el8.tuxcare.els1
3.1.5-1.el8.tuxcare.els1
corosync-vqsim
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 3.1.5-1.el8.tuxcare.els1
3.1.5-1.el8.tuxcare.els1
corosynclib
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 3.1.5-1.el8.tuxcare.els1
3.1.5-1.el8.tuxcare.els1
corosynclib-devel
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 3.1.5-1.el8.tuxcare.els1
3.1.5-1.el8.tuxcare.els1
spausedd
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 3.1.5-1.el8.tuxcare.els1
3.1.5-1.el8.tuxcare.els1
corosync
Debian:12
 before 3.1.7-1+deb12u2, plus listed versions
3.1.7-13.1.7-1+deb12u1
3.1.7-1+deb12u2
corosync
Debian:13
 before 3.1.9-2+deb13u1, plus listed versions
3.1.9-2
3.1.9-2+deb13u1
corosync
Debian:14
 before 3.1.10-2, plus listed versions
3.1.10-13.1.9-2
3.1.10-2
corosync
Mageia:10
From an advisory covering 2 CVEs
 before 3.1.10-2.1.mga10
3.1.10-2.1.mga10
libqb
Mageia:10
From an advisory covering 2 CVEs
 before 2.0.9-1.1.mga10
2.0.9-1.1.mga10
corosync
Mageia:9
From an advisory covering 2 CVEs
 before 3.1.7-1.3.mga9
3.1.7-1.3.mga9
libqb
Mageia:9
From an advisory covering 2 CVEs
 before 2.0.8-1.1.mga9
2.0.8-1.1.mga9
corosync
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.0.2-7.oe2003sp4
3.0.2-7.oe2003sp4
corosync
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 3.1.5-3.oe2203sp4
3.1.5-3.oe2203sp4
corosync
openEuler:24.03-LTS-SP3
From an advisory covering 2 CVEs
 before 3.1.8-8.oe2403sp3
3.1.8-8.oe2403sp3
corosync
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 3.1.8-8.oe2403
3.1.8-8.oe2403
corosync
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 3.1.8-8.oe2403sp1
3.1.8-8.oe2403sp1
corosync
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosync-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosync-debugsource
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosynclib
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosynclib-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosync-vqsim
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosynclib-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosync
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
spausedd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-vqsim
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
spausedd-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debuginfo
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debugsource
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib-debuginfo
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib-devel
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
spausedd
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
spausedd-debuginfo
Red Hat:enterprise_linux:8::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debuginfo
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-debugsource
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib-debuginfo
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosynclib-devel
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
spausedd
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
spausedd-debuginfo
Red Hat:enterprise_linux:8::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-vqsim
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync
Red Hat:enterprise_linux:9::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debuginfo
Red Hat:enterprise_linux:9::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debugsource
Red Hat:enterprise_linux:9::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:9::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib-debuginfo
Red Hat:enterprise_linux:9::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib-devel
Red Hat:enterprise_linux:9::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-debugsource
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync-vqsim-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosynclib-devel
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosync-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosync-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosync-vqsim-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosynclib
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosynclib-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosync-vqsim
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosynclib-devel
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:3.1.9-1.el10_0.2
0:3.1.9-1.el10_0.2
corosync
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-debuginfo
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-debugsource
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib-debuginfo
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib-devel
Red Hat:rhel_e4s:9.2::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-debuginfo
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-debugsource
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib-debuginfo
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosynclib-devel
Red Hat:rhel_e4s:9.2::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el9_2.1
0:3.1.7-1.el9_2.1
corosync
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-debuginfo
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-debugsource
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib-debuginfo
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib-devel
Red Hat:rhel_e4s:9.0::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-debuginfo
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-debugsource
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib-debuginfo
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosynclib-devel
Red Hat:rhel_e4s:9.0::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.5-3.el9_0.1
0:3.1.5-3.el9_0.1
corosync
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debugsource
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-vqsim
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debuginfo
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debugsource
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib-devel
Red Hat:rhel_eus:9.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debuginfo
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-debugsource
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosynclib-devel
Red Hat:rhel_eus:9.4::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el9_4.1
0:3.1.8-1.el9_4.1
corosync
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debugsource
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-vqsim
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.6::crb
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync
Red Hat:rhel_eus:9.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debuginfo
Red Hat:rhel_eus:9.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debugsource
Red Hat:rhel_eus:9.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib-devel
Red Hat:rhel_eus:9.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync
Red Hat:rhel_eus:9.6::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debuginfo
Red Hat:rhel_eus:9.6::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-debugsource
Red Hat:rhel_eus:9.6::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_eus:9.6::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib-debuginfo
Red Hat:rhel_eus:9.6::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosynclib-devel
Red Hat:rhel_eus:9.6::resilientstorage
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_6.1
0:3.1.9-2.el9_6.1
corosync
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debugsource
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd-debuginfo
Red Hat:rhel_aus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debugsource
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd-debuginfo
Red Hat:rhel_e4s:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debugsource
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd-debuginfo
Red Hat:rhel_tus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debuginfo
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debugsource
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-debuginfo
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-devel
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd-debuginfo
Red Hat:rhel_e4s:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debuginfo
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-debugsource
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync-vqsim-debuginfo
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-debuginfo
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosynclib-devel
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
spausedd-debuginfo
Red Hat:rhel_tus:8.6::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.5-2.el8_6.1
0:3.1.5-2.el8_6.1
corosync
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-vqsim-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
spausedd-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-vqsim-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
spausedd-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debuginfo
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debugsource
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-vqsim-debuginfo
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib-debuginfo
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib-devel
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
spausedd
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
spausedd-debuginfo
Red Hat:rhel_aus:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debuginfo
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-debugsource
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync-vqsim-debuginfo
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib-debuginfo
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosynclib-devel
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
spausedd
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
spausedd-debuginfo
Red Hat:rhel_eus_long_life:8.4::highavailability
From an advisory covering 2 CVEs
 before 0:3.1.0-3.el8_4.2
0:3.1.0-3.el8_4.2
corosync
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el8_8.1
0:3.1.7-1.el8_8.1
corosync-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 0:3.1.7-1.el8_8.1
0:3.1.7-1.el8_8.1
corosync
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el10_1.1
0:3.1.9-2.el10_1.1
corosync
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.1.8-1.el8_10.1
0:3.1.8-1.el8_10.1
corosync
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.1.9-2.el9_7.1
0:3.1.9-2.el9_7.1
corosync
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:3.1.10-1.el10_2.1
0:3.1.10-1.el10_2.1
corosync
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:3.1.10-1.el9_8.1
0:3.1.10-1.el9_8.1
corosync
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 2 CVEs
 before 2.4.6-150300.12.16.1
2.4.6-150300.12.16.1
corosync
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 2 CVEs
 before 2.4.6-150300.12.16.1
2.4.6-150300.12.16.1
corosync
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 2 CVEs
 before 2.4.6-150300.12.16.1
2.4.6-150300.12.16.1
corosync
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 2 CVEs
 before 2.4.6-150300.12.16.1
2.4.6-150300.12.16.1
corosync
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 2.4.6-150300.12.16.1
2.4.6-150300.12.16.1
corosync
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 3.1.9-160000.3.1
3.1.9-160000.3.1
corosync
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.3.4-0ubuntu12.3.5-32.3.5-3ubuntu12.3.5-3ubuntu22.3.5-3ubuntu2.12.3.5-3ubuntu2.3
 None known
corosync
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.4.2-3build12.4.2-3ubuntu12.4.3-0ubuntu12.4.3-0ubuntu1.12.4.3-0ubuntu1.22.4.3-0ubuntu1.3
 None known
corosync
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.0.1-2ubuntu13.0.2-1ubuntu13.0.2-1ubuntu23.0.3-2ubuntu13.0.3-2ubuntu23.0.3-2ubuntu2.13.0.3-2ubuntu2.2
 None known
corosync
Ubuntu:22.04:LTS
 before 3.1.6-1ubuntu1.2, plus listed versions
3.1.2-2ubuntu13.1.6-1ubuntu13.1.6-1ubuntu1.1
3.1.6-1ubuntu1.2
corosync
Ubuntu:24.04:LTS
 before 3.1.7-1ubuntu3.2, plus listed versions
3.1.7-1ubuntu13.1.7-1ubuntu23.1.7-1ubuntu33.1.7-1ubuntu3.1
3.1.7-1ubuntu3.2
corosync
Ubuntu:25.10
 before 3.1.9-2ubuntu1.1, plus listed versions
3.1.8-3ubuntu23.1.9-2ubuntu1
3.1.9-2ubuntu1.1
corosync
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 3.1.6-1ubuntu1.2, plus listed versions
3.1.2-2ubuntu13.1.6-1ubuntu13.1.6-1ubuntu1.1
3.1.6-1ubuntu1.2
corosync
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 3.1.7-1ubuntu3.2, plus listed versions
3.1.7-1ubuntu13.1.7-1ubuntu23.1.7-1ubuntu33.1.7-1ubuntu3.1
3.1.7-1ubuntu3.2
corosync
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 3.1.9-2ubuntu1.1, plus listed versions
3.1.8-3ubuntu23.1.9-2ubuntu1
3.1.9-2ubuntu1.1
corosync
openSUSE:Tumbleweed
 before 3.1.10-4.1
3.1.10-4.1
corosync
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 3.1.9-160000.3.1
3.1.9-160000.3.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-35091 is a high vulnerability (CVSS 8.2) in Corosync, published April 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. Fixed in corosync 3.1.7-1+deb12u2.

References

Show 71 moreShow less
This page doesn't list everything

Left out here: 66 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open