Description (CNA)
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| unspecified / corosync | affected corosync 2.4.4 |
CWE
CWE-190
References
- http://www.securityfocus.com/bid/103758
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1084
- https://www.debian.org/security/2018/dsa-4174
- https://access.redhat.com/errata/RHSA-2018:1169
- https://usn.ubuntu.com/4000-1/
- https://security.gentoo.org/glsa/202107-01
ADP enrichment
No English description supplied.