Lucene search

K
osvGoogleOSV:GHSA-CHXF-FJCF-7FWP
HistoryMar 01, 2022 - 9:04 p.m.

Possible filesystem space exhaustion by local users

2022-03-0121:04:07
Google
osv.dev
10
filesystem space exhaustion
local users
fscrypt v0.3.3
permissions
cve-2022-25326
github mention

AI Score

5.3

Confidence

High

EPSS

0

Percentile

12.6%

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt v0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

For more details, see CVE-2022-25326 and https://github.com/google/fscrypt#setting-up-fscrypt-on-a-filesystem.

AI Score

5.3

Confidence

High

EPSS

0

Percentile

12.6%