Lucene search
K

210 matches found

Fedora
Fedora
added 2020/09/07 5:15 p.m.25 views

[SECURITY] Fedora 32 Update: cryptsetup-2.3.4-1.fc32

The cryptsetup package contains a utility for setting up disk encryption using dm-crypt kernel module...

7.8CVSS2.6AI score0.00282EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2020/09/03 2:20 a.m.24 views

CVE-2020-14382

A flaw was found in the way cryptsetup parses encrypted images with invalid segments. This flaw allows a local attacker to crash an application compiled with cryptsetup, or in some cases, cause arbitrary code execution when parsing specially crafted encrypted images. The highest threat from this...

7.8CVSS5.2AI score0.00282EPSS
Exploits0References4
OSV
OSV
added 2020/09/03 12:0 a.m.0 views

UBUNTU-CVE-2020-14382

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2jsonmetadata.c' in function...

7.8CVSS7.1AI score0.00282EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2020/09/03 12:0 a.m.28 views

CVE-2020-14382

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2jsonmetadata.c' in function...

7.8CVSS7.1AI score0.00282EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2020/05/05 12:0 a.m.45 views

systemd security, bug fix, and enhancement update

239-29.0.1.el8 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog entries Orabug: 30853009 - fix to generate systemd-pstore.service file Orabug: 30230056 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug:...

7.8CVSS7AI score0.00151EPSS
Exploits2
Positive Technologies
Positive Technologies
added 2019/12/13 12:0 a.m.1 views

PT-2020-6853 · Unknown +6 · Cryptsetup +6

Name of the Vulnerable Software and Affected Versions: cryptsetup version 2.2.0 Description: A bug was found in the LUKS2 format validation code of cryptsetup, specifically in the segments validation code in the hdr validate segments function. This function is located in the file lib/luks2/luks2...

9.3CVSS8.7AI score0.00282EPSS
Exploits0References35
Oracle linux
Oracle linux
added 2019/11/14 12:0 a.m.24 views

systemd security, bug fix, and enhancement update

239-18.0.1 - fix netdev is missing for iscsi entry in /etc/fstab [email protected] Orabug: 25897792 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 Orabug: 22224874 - allow dm remove ioctl to co-operate with UEK3 Vaughan Cao Orabug: 18467469 - add hv dynamic memory support Jerry...

4.4CVSS5.5AI score0.00105EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2019/03/27 12:0 a.m.33 views

openSUSE Security Update : systemd (openSUSE-2019-909)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

8.8CVSS7.3AI score0.01533EPSS
Exploits4References21
Tenable Nessus
Tenable Nessus
added 2019/01/02 12:0 a.m.63 views

SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2018:3644-1)

This update for systemd fixes the following issues : Security issues fixed : CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 CVE-2018-15686: A vulnerability in unitdeserialize ...

8.8CVSS7.1AI score0.01533EPSS
Exploits4References23
Tenable Nessus
Tenable Nessus
added 2018/11/19 12:0 a.m.28 views

openSUSE Security Update : systemd (openSUSE-2018-1423)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

8.8CVSS7.2AI score0.01533EPSS
Exploits4References11
Tenable Nessus
Tenable Nessus
added 2018/11/15 12:0 a.m.57 views

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2018:3767-1)

This update for systemd fixes the following issues : Security issues fixed : CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 CVE-2018-15686: A vulnerability in unitdeserialize ...

8.8CVSS7.2AI score0.01533EPSS
Exploits4References14
Tenable Nessus
Tenable Nessus
added 2018/11/11 12:0 a.m.49 views

openSUSE Security Update : systemd (openSUSE-2018-1382)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

8.8CVSS7.3AI score0.01533EPSS
Exploits4References21
Tenable Nessus
Tenable Nessus
added 2018/02/28 12:0 a.m.34 views

openSUSE Security Update : systemd (openSUSE-2018-216)

This update for systemd fixes the following issues : Security issue fixed : - CVE-2017-18078: tmpfiles: refuse to chown/chmod files which are hardlinked, unless protectedhardlinks sysctl is on. This could be used by local attackers to gain privileges bsc1077925 Non Security issues fixed : - core:...

7.8CVSS6.5AI score0.00084EPSS
Exploits3References7
Tenable Nessus
Tenable Nessus
added 2018/02/27 12:0 a.m.33 views

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2018:0546-1)

This update for systemd fixes the following issues: Security issue fixed : - CVE-2017-18078: tmpfiles: refuse to chown/chmod files which are hardlinked, unless protectedhardlinks sysctl is on. This could be used by local attackers to gain privileges bsc1077925 Non Security issues fixed : - core:...

7.8CVSS6.6AI score0.00084EPSS
Exploits3References9
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:0 a.m.11 views

Fedora 27 : systemd (2017-6263c938c7)

Use infinite timeouts for passwords during boot when JobTimeoutSec=0 - Some tty utf8-mode fixes - Only send one auxillary fd set over dbus - Various network-manager crash and spurious assert fixes - Do not remount network filesystems ro during shutdown and unmount DM devices better - Fix...

5.5AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/11/01 12:0 a.m.16 views

Fedora 26 : systemd (2017-6f8fcff58c)

systemd-detect-virt QEMU CPUID logic update - Fix cryptsetup devices disappearing when used for btrfs - Fix rfkill on some thinkpads - Extend dbus timeouts to handle slow dbus daemon startup - Fix systemd-resolved DOS with crafted NSEC packets LP1725351 - Backport /etc/crypttab netdev feature...

5.5AI score
Exploits0References1
NVD
NVD
added 2017/01/23 9:59 p.m.5 views

CVE-2016-4484

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password...

7.2CVSS6.7AI score0.00459EPSS
Exploits5References7
OSV
OSV
added 2017/01/23 9:59 p.m.2 views

DEBIAN-CVE-2016-4484

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password...

6.8CVSS7.1AI score0.00459EPSS
Exploits5References1
OSV
OSV
added 2017/01/23 9:59 p.m.10 views

CVE-2016-4484

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password...

6.8CVSS7AI score0.00459EPSS
Exploits5References7
OSV
OSV
added 2017/01/23 9:59 p.m.2 views

UBUNTU-CVE-2016-4484

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password...

6.8CVSS6.8AI score0.00459EPSS
Exploits5References2
Rows per page
Query Builder