GCVE-110-MAGEIA-2025-127

Advisory Published

Vulnetix · Advisory published April 5, 2025

Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet. (CVE-2025-30472)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	corosync	0 (affected), 3.1.7-1.1.mga9 (unaffected)	—

Aliases

CVE-2025-30472

References

Updated corosync packages fix security vulnerability

advisory

Updated corosync packages fix security vulnerability

issue

Updated corosync packages fix security vulnerability

issue

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON