Cryptsetup Project Cryptsetup vulnerabilities
3 known vulnerabilities affecting cryptsetup_project/cryptsetup.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2020-14382P3HIGHCVSS 7.8v2.2.0vcryptsetup-2.2.02020-09-16
CVE-2020-14382 [HIGH] CWE-787 CVE-2020-14382: A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format
A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_obje
nvdosv
CVE-2016-4484P4MEDIUMCVSS 6.8≤ 2.1.7.3-22017-01-23
CVE-2016-4484 [MEDIUM] CWE-287 CVE-2016-4484: The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximat
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
nvdosv
CVE-2021-4122P4MEDIUMCVSS 4.3fixed in 2.3.7≥ 2.4.0, < 2.4.3+1 more2022-08-24
CVE-2021-4122 [MEDIUM] CWE-345 CVE-2021-4122: It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption d
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.
nvdosv