Corosync : Security Vulnerabilities, CVEs,
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
Max CVSS
7.5
EPSS Score
3.63%
Published
2018-04-12
Updated
2023-01-31
The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet.
Max CVSS
5.0
EPSS Score
1.30%
Published
2014-06-06
Updated
2014-06-09
2 vulnerabilities found