Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

Ubuntu: 4000-1 Moderate: Corosync Denial Of Service Issue

ubuntu
Calendar Grey May 30, 2019
Dist Ubuntu Esm H88
A security flaw in Corosync on Ubuntu may lead to system crashes or allow attackers to execute arbitrary code. Follow the provided update steps to apply the necessary security patch.
Corosync could be made to crash or execute arbitrary code if it received a specially crafted request.

Summary

Corosync could be made to crash or execute arbitrary code if it

received a specially crafted request.

Software Description:

- corosync: cluster engine daemon and utilities

Details:

It was discovered that Corosync incorrectly handled certain requests.

An attacker could possibly use this issue to cause a denial of service

or execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service security issue arbitrary code execution ubuntu corosync

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  corosync                        2.4.3-0ubuntu1.1
  libtotem-pg5                    2.4.3-0ubuntu1.1

Ubuntu 16.04 LTS:
  corosync                        2.3.5-3ubuntu2.3
  libtotem-pg5                    2.3.5-3ubuntu2.3

After a standard system update you need to restart Corosync to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-4000-1

  CVE-2018-1084

Severity
important
Lowest
Low
Medium
High
Critical

May 30, 2019

Topics%20covered

Topics Covered

security advisory denial of service security issue arbitrary code execution ubuntu corosync

Package Information

  https://launchpad.net/ubuntu/+source/corosync/2.4.3-0ubuntu1.1
  https://launchpad.net/ubuntu/+source/corosync/2.3.5-3ubuntu2.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.