Lucene search

K
osvGoogleOSV:GHSA-8VWM-8VJ8-RQJF
HistoryFeb 26, 2022 - 12:00 a.m.

User login denial of service in github.com/google/fscrypt

2022-02-2600:00:44
Google
osv.dev
17
fscrypt
login denial
denial of service
pam module
metadata
upgrade
software

EPSS

0

Percentile

5.1%

The PAM module for fscrypt doesn’t adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

EPSS

0

Percentile

5.1%