The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_13657 advisory.

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19043 advisory.

    - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
    - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14215 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14205 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13657 advisory.

    - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13644 advisory.

    - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:13644 advisory.

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
      * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-95ee0edcd5 advisory.

    Security fix for CVE-2026-35091 and CVE-2026-35092

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8170-1 advisory.

    It was discovered that Corosync incorrectly handled the membership commit token validity check. A remote     attacker could use this issue to cause Corosync to crash, resulting in a denial of service, or to possibly     obtain a small quantity of sensitive information. (CVE-2026-35091)

    It was discovered that Corosync incorrectly handled join message validation. A remote attacker could     possibly use this issue to cause Corosync to crash, resulting in a denial of service. (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4608 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4608-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Emmanuel Arias     May 30, 2026                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : corosync     Version        : 3.1.2-2+deb11u2     CVE ID         : CVE-2026-35091 CVE-2026-35092     Debian Bug     : 1133837 1133838


    Two vulnerabilities have been found in corosync, a cluster engine daemon and     utilities, that allow a remote, unauthenticated attacker to cause a denial of     service.

    CVE-2026-35091

        A remote unauthenticated attacker can exploit a wrong return value         vulnerability in the Corosync membership commit token sanity check by         sending a specially crafted User Datagram Protocol (UDP) packet. This can         lead to an out-of-bounds read, causing a denial of service (DoS) and         potentially disclosing limited memory contents.

    CVE-2026-35092

        An integer overflow vulnerability in Corosync's join message sanity         validation allows a remote, unauthenticated attacker to send crafted User         Datagram Protocol (UDP) packets. This can cause the service to crash,         leading to a denial of service.

    For Debian 11 bullseye, these problems have been fixed in version     3.1.2-2+deb11u2.

    We recommend that you upgrade your corosync packages.

    For the detailed security status of corosync please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/corosync

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_13644 advisory.

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_13673 advisory.

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
355200	Rocky Linux 8 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc Multiple Vulnerabilities (crlsa-2026_13657)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
327035	Oracle Linux 10 : corosync (ELSA-2026-19043)	Nessus	Oracle Linux Local Security Checks	2026/7/15	2026/7/15	high
312652	RHEL 8 : corosync (RHSA-2026:14215)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/8/6	high
312664	RHEL 10 : corosync (RHSA-2026:14205)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/8/6	high
314200	Oracle Linux 8 : corosync (ELSA-2026-13657)	Nessus	Oracle Linux Local Security Checks	2026/5/11	2026/5/11	high
314201	Oracle Linux 10 : corosync (ELSA-2026-13644)	Nessus	Oracle Linux Local Security Checks	2026/5/11	2026/5/11	high
314445	AlmaLinux 10 : corosync (ALSA-2026:13644)	Nessus	Alma Linux Local Security Checks	2026/5/13	2026/5/13	high
306047	Fedora 42 : corosync (2026-95ee0edcd5)	Nessus	Fedora Local Security Checks	2026/4/12	2026/4/12	high
306304	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : Corosync vulnerabilities (USN-8170-1)	Nessus	Ubuntu Local Security Checks	2026/4/14	2026/4/14	high
318003	Debian dla-4608 : corosync - security update	Nessus	Debian Local Security Checks	2026/5/30	2026/5/30	high
353892	Rocky Linux 10.1 [CIQ] Security Update: corosync-debuginfo / corosync-debugsource / corosync-vqsim / etc Multiple Vulnerabilities (crlsa-2026_13644)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
356011	Rocky Linux 9 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc Multiple Vulnerabilities (crlsa-2026_13673)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high