Threats tagged 'ghsa-4q2r-xgxr-vvqm'

A critical stack-based buffer overflow vulnerability exists in Corosync versions through 3.1.9. This flaw occurs in the orf_token_endian_convert function within exec/totemsrp.c when encryption is disabled or if an attacker knows the encryption key, and can be triggered by sending a large UDP packet.