SERVER-OTHER Corosync 2.3+ with sha512 integer overflow attempt detected
This event is generated when a corosync 2.3+ set to sha512 integer overflow attempt is detected.
Misc Attack
CVE-2018-1084:
CVSS base score 9.8
CVSS impact score 5.9
CVSS exploitability score 3.9
Confidentiality Impact HIGH
Integrity Impact HIGH
Availability Impact HIGH
CVE-2018-1084: corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.
CVE-2018-1084:
Access Vector
Access Complexity
Authentication