Lucene search

K
osvGoogleOSV:GHSA-MPQ4-RJJ8-FJPH
HistoryFeb 26, 2022 - 12:00 a.m.

Uncontrolled Resource Consumption in github.com/google/fscrypt

2022-02-2600:00:44
Google
osv.dev
6
fscrypt
github
unprivileged users
filesystem
upgrade
permissions

EPSS

0

Percentile

12.6%

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

EPSS

0

Percentile

12.6%