Lucene search

K
osvGoogleOSV:CVE-2022-25326
HistoryFeb 25, 2022 - 11:15 a.m.

CVE-2022-25326

2022-02-2511:15:08
Google
osv.dev
5
fscrypt
filesystem
world-writable
unprivileged users
filesystem space
upgrade
permissions

AI Score

5.4

Confidence

High

EPSS

0

Percentile

12.6%

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

AI Score

5.4

Confidence

High

EPSS

0

Percentile

12.6%