Vendor
A heap-based buffer overflow in the Corosync Totem Process Group component allows a network-adjacent attacker to crash the cluster or potentially execute arbitrary code via crafted multicast messages.