CVE-2025-30472

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Corosync	Corosync	<= 3.1.9

References

https://corosync.orgProduct
https://github.com/corosync/corosync/blob/73ba225cc48ebb1903897c792065cb5e876613b0/exec/totemsrp.c#L4677Product
https://github.com/corosync/corosync/issues/778Exploit, Issue Tracking
https://lists.debian.org/debian-lts-announce/2025/09/msg00023.html
https://github.com/corosync/corosync/issues/778Exploit, Issue Tracking

Timeline

Published: Mar 22, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-304738.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. W CVE-2025-304745.0Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS. The FtpFileObject class can throw an except CVE-2025-304759.8Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability. An unauthenticated attacker wi CVE-2025-304767.5Dell PowerScale InsightIQ, version 5.2, contains an uncontrolled resource consumption vulnerability. An unauthenticated attacker with remote CVE-2025-304774.9Dell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. A high privile CVE-2025-304797.2Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain CVE-2025-30486.5After completing a build with AWS Serverless Application Model Command Line Interface (SAM CLI) which include symlinks, the content of those CVE-2025-304806.5Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerProtect Data Manager.CVE-2025-304835.5Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. CVE-2025-304856.2UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected pr CVE-2025-30506.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticat CVE-2025-305066.7Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escal