The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0287 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-30472:
    Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-     based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7478 advisory.

    * corosync: Stack buffer overflow from 'orf_token_endian_convert' (CVE-2025-30472)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c55f39aeb3 advisory.

    Security fix for CVE-2025-30472

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-     based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
    (CVE-2025-30472)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005515 advisory.

    Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-     based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7478-1 advisory.

    It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled,     or an attacker knows the encryption key, this issue could be used to cause Corosync to crash, resulting in     a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7201 advisory.

    * corosync: Stack buffer overflow from 'orf_token_endian_convert' (CVE-2025-30472)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
276088	TencentOS Server 4: corosync (TSSA-2025:0287)	Nessus	Tencent Local Security Checks	2025/11/20	2026/1/9	critical
266649	RockyLinux 10 : corosync (RLSA-2025:7478)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2026/1/9	critical
233806	Fedora 41 : corosync (2025-c55f39aeb3)	Nessus	Fedora Local Security Checks	2025/4/3	2026/1/21	critical
256011	Linux Distros Unpatched Vulnerability : CVE-2025-30472	Nessus	Misc.	2025/8/27	2025/9/25	critical
300748	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: corosync (UTSA-2026-005515)	Nessus	Unity Linux Local Security Checks	2026/3/4	2026/3/4	critical
235146	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Corosync vulnerability (USN-7478-1)	Nessus	Ubuntu Local Security Checks	2025/5/5	2026/1/9	critical
241269	AlmaLinux 9 : corosync (ALSA-2025:7201)	Nessus	Alma Linux Local Security Checks	2025/7/3	2026/1/9	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical