high7.5
CVE-2018-1084
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
Impact
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Corosync | Corosync | from 2.3.0 before 2.4.4 |
| Debian | Debian Linux | Version 9.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103758
- https://access.redhat.com/errata/RHSA-2018:1169
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1084
- https://security.gentoo.org/glsa/202107-01
- https://usn.ubuntu.com/4000-1/
- https://www.debian.org/security/2018/dsa-4174
- http://www.securityfocus.com/bid/103758
- https://access.redhat.com/errata/RHSA-2018:1169
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1084
- https://security.gentoo.org/glsa/202107-01
- https://usn.ubuntu.com/4000-1/
- https://www.debian.org/security/2018/dsa-4174