CVE Feed

    Dashboard / CVE / CVE-2025-30472

    CVE-2025-30472

    Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.

    Published:Mar 22, 2025
    Last Modified:Nov 3, 2025
    EPS:Mar 22, 2025
    EPSS Score:0.00072
    CVSS Score:9

    Affected Products

    Vendor
    Corosync
    Product
    Corosync
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://github.com/corosync/corosync/issues/778https://github.com/corosync/corosync/issues/778

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-81665 (CVSS 7.5) — A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When pr…
    CVE-2026-81666 (CVSS 6.5) — An integer overflow was found in Corosync's handling of membership commit token messages. The length-validatio…
    CVE-2026-35092 (CVSS 7.5) — A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation a…
    CVE-2026-35091 (CVSS 8.2) — A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability…
    CVE-2018-1084 (CVSS 7.5) — corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.…
    CVE-2013-0250 (CVSS 5) — The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the H…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High