236 matches found
ROS-20220125-20
Cryptsetup package vulnerability is related to modification of metadata to disable encryption in partitions in the LUKS2 Linux Unified Key Setup format. Exploitation of the vulnerability could allow an attacker to force a user to permanently disable the encryption layer of this media. a user to...
Fedora: Security Advisory for cryptsetup (FEDORA-2022-61b55b6ebc)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: cryptsetup-2.3.7-1.fc34
The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module...
Critical Photon OS Security Update - PHSA-2022-0145
Updates of 'systemd', 'linux-aws', 'linux-secure', 'aide', 'ImageMagick', 'linux-rt', 'linux', 'expat', 'linux-esx', 'cryptsetup', 'wireshark' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2022-4.0-0145
Updates of 'cryptsetup', 'linux-esx', 'expat', 'wireshark', 'linux-aws', 'systemd', 'aide', 'ImageMagick', 'linux', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
SUSE SLED15: cryptsetup / cryptsetup-lang / libcryptsetup-devel / etc (SUSE-SU-2022:0144-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0144-1 advisory. - CVE-2021-4122: Fixed possible attacks against data confidentiality through LUKS2 online reencryption extension crash...
SUSE: Security Advisory (SUSE-SU-2022:0144-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : cryptsetup (openSUSE-SU-2022:0144-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0144-1 advisory. - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker...
SUSE-SU-2022:0144-1 Security update for cryptsetup
This update for cryptsetup fixes the following issues: - CVE-2021-4122: Fixed possible attacks against data confidentiality through LUKS2 online reencryption extension crash recovery bsc1194469...
OPENSUSE-SU-2022:0144-1 Security update for cryptsetup
This update for cryptsetup fixes the following issues: - CVE-2021-4122: Fixed possible attacks against data confidentiality through LUKS2 online reencryption extension crash recovery bsc1194469...
Critical Photon OS Security Update - PHSA-2022-0353
Updates of 'expat', 'cryptsetup' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2022-3.0-0353
Updates of 'cryptsetup', 'expat' packages of Photon OS have been released...
Insecure Cryptography
cryptsetup is vulnerable to insecure cryptography. A malicious attacker can modify on-disk metadata to simulate decryption in progress with crashed reencryption step and persistently decrypt part of the LUKS device...
[SECURITY] Fedora 35 Update: cryptsetup-2.4.3-1.fc35
The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module...
Fedora: Security Advisory for cryptsetup (FEDORA-2022-40d0a8de5e)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
cryptsetup 数据伪造问题漏洞
Cryptsetup is a utility to easily set up disk encryption based on the DMCrypt kernel module. A security vulnerability exists in cryptsetup that stems from the software's lack of effective validation of data authenticity. A specially crafted LUKS header can trick cryptsetup into disabling encrypti...
CVE-2021-4122
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that...
Advisory ROSA-SA-2021-1815
Software: cryptsetup 2.0.3 OS: Cobalt 7.9 CVE-ID: CVE-2016-4484 CVE-Crit: MEDIUM CVE-DESC: Debian initrd script for cryptsetup package 2: 1.7.3-2 and earlier allows physically nearby attackers to gain access to the shell through multiple login attempts with an incorrect password. CVE-STATUS:...
PT-2022-11374
Name of the Vulnerable Software and Affected Versions cryptsetup versions 2.2.0 through 2.3.6 cryptsetup versions 2.4.0 through 2.4.2 Description A flaw was found in cryptsetup that could allow an attacker with physical access to a medium, such as a flash disk, to trick the system into disabling...
