corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade corosynclibUpgrade corosync-debuginfoUpgrade corosynclib-develUpgrade corosync-qnetdUpgrade corosyncUpgrade corosync-qdevice | Apr 27, 2020 | Apr 12, 2018 |
| Centos_linux | — | Upgrade corosyncUpgrade corosync-qnetdUpgrade corosync-debuginfoUpgrade corosync-qdeviceUpgrade corosynclibUpgrade corosynclib-devel | Jun 1, 2018 | Apr 12, 2018 |
| Debian | — | Upgrade corosync | Apr 19, 2018 | Apr 12, 2018 |
| Gentoo Linux | — | Upgrade sys-cluster/corosync. | Jul 5, 2021 | Apr 12, 2018 |
| Oracle_linux | — | Upgrade corosync-qdeviceUpgrade corosynclibUpgrade corosynclib-develUpgrade corosyncUpgrade corosync-qnetd | May 1, 2018 | Apr 12, 2018 |
| Redhat_linux | — | Upgrade corosynclib-develUpgrade corosync-qnetdUpgrade corosync-qdeviceUpgrade corosync-debuginfoUpgrade corosyncUpgrade corosynclib | Apr 19, 2018 | Apr 12, 2018 |
| Suse | — | Upgrade libcmap4Upgrade corosync-testagentsUpgrade libsam4Upgrade libcorosync-develUpgrade corosync-qnetdUpgrade libcpg4Upgrade libquorum5Upgrade libcorosync4Upgrade corosyncUpgrade libcorosync_common4Upgrade libtotem_pg5Upgrade corosync-qdeviceUpgrade libvotequorum8Upgrade libcfg6 | May 3, 2018 | Apr 12, 2018 |
| Ubuntu | — | Upgrade corosyncUpgrade libtotem-pg5 | May 31, 2019 | Apr 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub