123 matches found
EulerOS 2.0 SP10 : cryptsetup (EulerOS-SA-2022-2424)
According to the versions of the cryptsetup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An...
Huawei EulerOS: Security Advisory for cryptsetup (EulerOS-SA-2022-2339)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.1 : cryptsetup (EulerOS-SA-2022-2339)
According to the versions of the cryptsetup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the...
EulerOS 2.0 SP9 : cryptsetup (EulerOS-SA-2022-2308)
According to the versions of the cryptsetup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An...
Amazon Linux 2022 : cryptsetup, cryptsetup-devel, cryptsetup-libs (ALAS2022-2022-064)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-064 advisory. It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk...
Ubuntu: Security Advisory (USN-4122-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4122
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...
CVE-2021-4122
CVE-2021-4122 affects cryptsetup’s LUKS2 online reencryption feature. An attacker with repeated physical access can modify on-disk metadata to simulate decryption in progress, potentially decrypting portions of the LUKS2 device and compromising data. Debian confirms impact on LUKS2 (LUKS1 affecte...
Stack overflow
A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...
PT-2022-22905 · Tenda · Tenda W6
Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A stack overflow issue exists in the /goform/WifiMacFilterSet endpoint, which can be exploited by attackers to cause a denial of service DoS via the index parameter. Recommendations: For Tenda W6...
PT-2022-22900 · Tenda · Tenda W6
Name of the Vulnerable Software and Affected Versions: Tenda W6 version 1.0.0.94122 Description: A command injection issue exists in the "/goform/exeCommand" API endpoint, allowing attackers to construct cmdinput parameters for arbitrary command execution. Recommendations: For Tenda W6 version...
AlmaLinux 8 : cryptsetup (ALSA-2022:0370)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:0370 advisory. - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical...
Debian: Security Advisory (DSA-5070-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : cryptsetup vulnerability (USN-5286-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5286-1 advisory. Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may...
Debian DSA-5070-1 : cryptsetup - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5070 advisory. CVE-2021-4122 Milan Broz, its maintainer, discovered an issue in cryptsetup, the disk encryption configuration tool for Linux. LUKS2 an on-disk format online reencryption ...
openSUSE: Security Advisory for cryptsetup (openSUSE-SU-2022:0144-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
MGASA-2022-0047 Updated cryptsetup packages fix security vulnerability
An attacker can modify on-disk metadata to simulate decryption in progress with crashed unfinished reencryption step and persistently decrypt part of the LUKS device CVE-2021-4122...
Updated cryptsetup packages fix security vulnerability
An attacker can modify on-disk metadata to simulate decryption in progress with crashed unfinished reencryption step and persistently decrypt part of the LUKS device CVE-2021-4122...
