CyberRota Analysis
AI-GeneratedCorosync's Totem Process Group is vulnerable to a heap-based buffer overflow due to insufficient bounds checking during the reassembly of fragmented multicast messages. An attacker on the same network can exploit this vulnerability by sending specially crafted messages, potentially leading to a denial of service for the entire cluster and creating opportunities for further exploitation. Organizations using Corosync in their cluster environments should prioritize patching this vulnerability to mitigate the risk of service disruption and potential data compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast protocol messages to the cluster could cause a heap buffer overflow with attacker-controlled data. This can crash the Corosync daemon, causing a denial of service to the entire cluster, and may potentially allow further exploitation given sufficient heap-corruption control.