| Package | Affected versions | Patched versions |
|---|---|---|
| corosync | ≤ 3.1.9 |
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free