Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-25327
HistoryFeb 25, 2022 - 11:15 a.m.

CVE-2022-25327

2022-02-2511:15:08
CWE-276
CWE-255
[email protected]
web.nvd.nist.gov
5
pam module
fscrypt
denial of service
metadata files
upgrade

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

JSON

The PAM module for fscrypt doesn’t adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

Affected configurations

Nvd
Node
googlefscryptRange<0.3.3
VendorProductVersionCPE
googlefscrypt*cpe:2.3:a:google:fscrypt:*:*:*:*:*:*:*:*

Related

osv 5
debiancve 1
prion 1
github 2
veracode 1
ubuntucve 1
cvelist 1
cve 1
osv
osv
CVE-2022-25327
2022-02-25 11:15:08
Denial of service via insufficient metadata validation
2022-03-01 21:05:01
User login denial of service in github.com/google/fscrypt
2022-02-26 00:00:44
debiancve
debiancve
CVE-2022-25327
2022-02-25 11:15:08
prion
prion
Code injection
2022-02-25 11:15:00
github
github
User login denial of service in github.com/google/fscrypt
2022-02-26 00:00:44
Denial of service via insufficient metadata validation
2022-03-01 21:05:01
veracode
veracode
Denial Of Service (DoS)
2022-02-28 09:12:53
ubuntucve
ubuntucve
CVE-2022-25327
2022-02-25 00:00:00
cvelist
cvelist
CVE-2022-25327 Local Denial of Service in fscrypt PAM module
2022-02-25 11:00:14
cve
cve
CVE-2022-25327
2022-02-25 11:15:08

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

JSON
Related for NVD:CVE-2022-25327
osv5debiancve1prion1github2veracode1ubuntucve1cvelist1cve1