• info
• discussion
• exploit
• solution
• references

Corosync 'exec/totemcrypto.c' Integer Overflow Vulnerability

Corosync is prone to an integer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

Versions prior to Corosync 2.4.4 are vulnerable.