漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Corosync: corosync: denial of service and information disclosure via crafted udp packet
Vulnerability Description
A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Vulnerability Type
对函数返回值的检查不正确
Vulnerability Title
Corosync 安全漏洞
Vulnerability Description
Corosync是The Corosync Cluster Engine开源的一个 Corosync 集群发动机。 Corosync存在安全漏洞，该漏洞源于成员资格提交令牌健全性检查存在错误的返回值，可能导致越界读取，造成拒绝服务并可能泄露有限内存内容。
CVSS Information
N/A
Vulnerability Type
N/A