Описание
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 3.1.8-3ubuntu2 |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | not-affected | 3.0.3-2ubuntu2.2 |
| esm-infra/xenial | needs-triage | |
| focal | released | 3.0.3-2ubuntu2.2 |
| jammy | released | 3.1.6-1ubuntu1.1 |
| noble | released | 3.1.7-1ubuntu3.1 |
| oracular | released | 3.1.8-2ubuntu1.1 |
| plucky | released | 3.1.8-3ubuntu2 |
| upstream | needs-triage |
Показывать по
EPSS
9 Critical
CVSS3
Связанные уязвимости
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
Corosync through 3.1.9, if encryption is disabled or the attacker know ...
Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert in exec/totemsrp.c via a large UDP packet.
EPSS
9 Critical
CVSS3