CVE-2010-3075

published 2010-09-17

CVE-2010-3075: EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to…

Priority P4 21 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the last block contains only one byte.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
arg0	encfs	<= 1.6.0	—
arg0	encfs	—	—
arg0	encfs	—	—
arg0	encfs	—	—
arg0	encfs	—	—
arg0	encfs	—	—
arg0	encfs	>= 0 < 1.7.2-1	1.7.2-1
arg0	encfs	>= 0 < 1.7.2-1	1.7.2-1
arg0	encfs	>= 0 < 1.7.2-1	1.7.2-1
debian	encfs	< encfs 1.7.2-1 (bookworm)	encfs 1.7.2-1 (bookworm)

CVSS provenance

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

osv 5.0 MEDIUM

vendor_debian 5.0 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-310