{
  "cveId": "CVE-2018-1084",
  "url": "https://patchblox.com/security/cve/CVE-2018-1084",
  "summary": "CVE-2018-1084 is fixed in 12 products on 1 platform, first by corosync 2.4.3-0ubuntu1.1, released April 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "corosync: corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.",
  "description": "corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.",
  "published": "2018-04-11T17:00:00Z",
  "severity": "Medium",
  "epss": 0.03113,
  "epssPercentile": 0.87863,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "corosync",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "corosync 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-corosync-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "corosync-notifyd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "corosync-notifyd 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-corosync-notifyd-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "corosync-qdevice",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "corosync-qdevice 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-corosync-qdevice-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "corosync-qnetd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "corosync-qnetd 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-corosync-qnetd-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcfg6",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libcfg6 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcfg6-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcmap4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libcmap4 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcmap4-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcorosync-common4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libcorosync-common4 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcorosync-common4-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcpg4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libcpg4 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcpg4-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libquorum5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libquorum5 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libquorum5-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libsam4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libsam4 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libsam4-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtotem-pg5",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libtotem-pg5 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtotem-pg5-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libvotequorum8",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.4.3-0ubuntu1.1",
      "fix": "libvotequorum8 2.4.3-0ubuntu1.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libvotequorum8-2.4.3-0ubuntu1.1",
      "released": "2018-04-11T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}