← All advisories

High severity7.5NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026

CVE-2018-1084

CVE-2018-1084

Description

corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

Corosync/Corosyncllm-fuzzy
Range: <2.4.4
osv-coords4 versions
pkg:rpm/opensuse/corosync&distro=openSUSE%20Tumbleweed pkg:rpm/suse/corosync&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP2 pkg:rpm/suse/corosync&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP3 pkg:rpm/suse/corosync&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
< 2.4.5+git70.64010f57-1.2+ 3 more
- (no CPE)range: < 2.4.5+git70.64010f57-1.2
- (no CPE)range: < 2.3.5-6.23.1
- (no CPE)range: < 2.3.6-9.13.1
- (no CPE)range: < 2.3.6-9.13.1
unspecified/corosyncv5
Range: corosync 2.4.4

Patches

Vulnerability mechanics

References

6

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/103758nvdThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2018:1169nvdThird Party Advisory
security.gentoo.org/glsa/202107-01nvdThird Party Advisory
usn.ubuntu.com/4000-1/nvdThird Party Advisory
www.debian.org/security/2018/dsa-4174nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.