The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13673 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14216 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14210 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6261 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6261-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     May 10, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : corosync     CVE ID         : CVE-2026-35091 CVE-2026-35092

    Two security vulnerabilities were discovered in the Corosync cluster     engine, which could result in denial of service or memory disclosure.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 3.1.7-1+deb12u2.

    For the stable distribution (trixie), these problems have been fixed in     version 3.1.9-2+deb13u1.

    We recommend that you upgrade your corosync packages.

    For the detailed security status of corosync please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/corosync

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13673 advisory.

    - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13657 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:14214 advisory.

    The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster     software.

    Security Fix(es):

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)

    * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-591:01 advisory.

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
      * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-593:02 advisory.

    * corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
      * corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
312256	RHEL 9 : corosync (RHSA-2026:13673)	Nessus	Red Hat Local Security Checks	2026/5/5	2026/5/5	high
312665	RHEL 8 : corosync (RHSA-2026:14216)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	high
313003	RHEL 9 : corosync (RHSA-2026:14210)	Nessus	Red Hat Local Security Checks	2026/5/7	2026/5/7	high
313710	Debian dsa-6261 : corosync - security update	Nessus	Debian Local Security Checks	2026/5/10	2026/5/10	high
313103	Oracle Linux 9 : corosync (ELSA-2026-13673)	Nessus	Oracle Linux Local Security Checks	2026/5/7	2026/5/11	high
312179	RHEL 8 : corosync (RHSA-2026:13657)	Nessus	Red Hat Local Security Checks	2026/5/5	2026/5/5	high
312661	RHEL 8 : corosync (RHSA-2026:14214)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	high
314167	MiracleLinux 9 : corosync-3.1.9-2.el9_7.1 (AXSA:2026-591:01)	Nessus	Miracle Linux Local Security Checks	2026/5/11	2026/5/11	high
314283	MiracleLinux 8 : corosync-3.1.8-1.el8_10.1 (AXSA:2026-593:02)	Nessus	Miracle Linux Local Security Checks	2026/5/11	2026/5/11	high

检测

插件搜索

high

high

high

high

high

high

high

high

high