CVE-2018-1084 Integer overflow in corosync

High 7.5 Published 12 Apr 2018 Updated 5 Aug 2024

An integer overflow in Corosync's cryptographic module can lead to a denial of service, requiring administrators to upgrade the cluster software.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-1084?

CVE-2018-1084 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 12 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.

Weakness: CWE-190

Which versions are affected by CVE-2018-1084?

It affects 4 products.

Linux distribution packages (10)

`corosync` Red Hat:enterprise_linux:7::server	All versions	`0:2.4.3-2.el7_5.1`
`corosync-debuginfo` Red Hat:enterprise_linux:7::server	All versions	`0:2.4.3-2.el7_5.1`
`corosync-qdevice` Red Hat:enterprise_linux:7::server	All versions	`0:2.4.3-2.el7_5.1`
`corosync-qnetd` Red Hat:enterprise_linux:7::server	All versions	`0:2.4.3-2.el7_5.1`
`corosynclib` Red Hat:enterprise_linux:7::server	All versions	`0:2.4.3-2.el7_5.1`
`corosynclib-devel` Red Hat:enterprise_linux:7::server	All versions	`0:2.4.3-2.el7_5.1`
`corosync` SUSE:Linux Enterprise High Availability Extension 12 SP2	All versions	`2.3.5-6.23.1`
`corosync` SUSE:Linux Enterprise High Availability Extension 12 SP3	All versions	`2.3.6-9.13.1`
`corosync` SUSE:Linux Enterprise Software Development Kit 12 SP3	All versions	`2.3.6-9.13.1`
`corosync` openSUSE:Tumbleweed	All versions	`2.4.5+git70.64010f57-1.2`

Products include Canonical Ubuntu Linux, Corosync Corosync, Debian Debian Linux, Redhat Enterprise Linux Server.

How do I fix CVE-2018-1084?

Upgrade to a fixed version.

Is CVE-2018-1084 being exploited?

There is no known exploitation of CVE-2018-1084 in the wild and no public exploit code.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2018-1084, DSA-4174-1, GHSA-4gvp-pc33-4ccc, MGASA-2018-0275, RHSA-2018:1169, SUSE-SU-2018:1121-1 and 4 more.