CVE:CVE-2018-1084
CNNVD:CNNVD-201804-606
Corosync是集群管理套件的一部分，它在传递信息时可通过一个简单的配置文件来定义信息传递的方式和协议等，并能够实现HA心跳信息传输功能。
Corosync 2.4.4之前版本中的exec/totemcrypto.c文件存在整数溢出漏洞。远程攻击者可利用该漏洞执行任意代码或造成拒绝服务。
solution:Upgrade corosync corosync to a higher version than 2.4.4,and avoid the version [2.3.0,2.4.4); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,and avoid the version 16.04,18.04