MGASA-2018-0275

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0275.html

Import Source

https://advisories.mageia.org/MGASA-2018-0275.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2018-0275

Upstream

CVE-2018-1084

Published

2018-06-06T18:15:31Z

Modified

2026-04-16T06:23:48Z

Summary

Updated corosync packages fix security vulnerability

Details

An integer overflow leading to an out-of-bound read was found in authenticate_nss_2_3() in Corosync. An attacker could craft a malicious packet that would lead to a denial of service (CVE-2018-1084).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:6 / corosync

Package

Name: corosync
Purl: pkg:rpm/mageia/corosync?arch=source&distro=mageia-6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.3.5-2.1.mga6

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2018-0275.json"