RSS   Vulnerabilities for 'Corosync'   RSS

2018-04-12
 
CVE-2018-1084

CWE-190
 

 
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.

 
2014-06-06
 
CVE-2013-0250

CWE-Other
 

 
The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet.

 


Copyright 2024, cxsecurity.com

 

Back to Top