CVE-2013-0250

Name of the Vulnerable Software and Affected Versions Corosync versions 2.0 through 2.3

Description The issue is related to the init nss hash function in exec/totemcrypto.c, which does not properly initialize the HMAC key. This allows remote attackers to cause a denial of service by sending a crafted packet, resulting in a crash.

Recommendations For Corosync versions 2.0 through 2.3, update to version 2.3 or later to resolve the issue.