CVE-2013-0250

The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3
does not properly initialize the HMAC key, which allows remote attackers to
cause a denial of service (crash) via a crafted packet.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699615&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=906834&gt;