Vulnerability in Corosync

CVE-2013-0250

The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet.

EPSS: 0.031 (86.3th percentile) — read the EPSS interpretation.

Affected products

  • Corosync — versions 2.0.0, 2.0.1, 2.0.2
  • N/a — versions n/a

References