Summary
It was discovered that Corosync incorrectly handled certain requests.
An attacker could possibly use this issue to cause a denial of service
or execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | corosync | 2.3.5-3ubuntu2.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | corosync | 2.4.3-0ubuntu1.1 |
Vulnerabilities 1
-
High 7.5
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
References
-
report
https://ubuntu.com/security/CVE-2018-1084