Sid 1-49880

SERVER-OTHER -- Snort has detected traffic exploiting vulnerabilities in a server in the network.

SERVER-OTHER Corosync 2.3+ with sha1 integer overflow attempt detected

This event is generated when CVE 2018-1084 is detected Impact: Misc Attack Details: Ease of Attack:

No public information

No known false positives

Cisco Talos Intelligence Group

Tactic:

Technique:

For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org

CVE-2018-1084

corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.