CVE-2025-30472

Name of the Vulnerable Software and Affected Versions Corosync versions 3.1.9 and earlier

Description The issue is a stack-based buffer overflow in the orf token endian convert function in exec/totemsrp.c via a large UDP packet, which can be exploited if encryption is disabled or the attacker knows the encryption key.

Recommendations For Corosync versions 3.1.9 and earlier, as a temporary workaround, consider disabling the orf token endian convert function until a patch is available. Restrict access to the vulnerable module to minimize the risk of exploitation. Avoid using large UDP packets in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.