Wind River Support Network

HomeDefectsLIN8-9032

Fixed

LIN8-9032 : Security Advisory - corosync - CVE-2018-1084

Created: Apr 16, 2018 Updated: Dec 3, 2018

Resolved Date: May 30, 2018

Found In Version: 8.0.0.25

Fix Version: 8.0.0.26

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.

https://nvd.nist.gov/vuln/detail/CVE-2018-1084