Search: CVE-2025-61770

Multiple denial-of-service vulnerabilities have been identified in the pcs packages used for configuring Pacemaker and Corosync utilities on Red Hat Enterprise Linux 7 Extended Lifecycle Support. These issues stem from unbounded buffering and reading in the Rack multipart parser and Rack::Request form parsing, which can lead to memory exhaustion. The vulnerabilities are rated as important by Red Hat and affect specific versions of the pcs package. Updates addressing these issues are available.