TencentOS Server 3: cryptsetup (TSSA-2022:0008)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0008 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Alibaba Cloud Linux 3 : 0008: cryptsetup (ALINUX3-SA-2022:0008)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0008 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-4122: It was found that a specially crafte...

cryptsetup bug fix and enhancement update

An update is available for cryptsetup. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

RHSA-2022:0370 Red Hat Security Advisory: cryptsetup security update

Bulletin has no description...

RHSA-2021:0258 Red Hat Security Advisory: cryptsetup security update

Bulletin has no description...

RHSA-2020:4900 Red Hat Security Advisory: cryptsetup security update

Bulletin has no description...

RHSA-2020:4542 Red Hat Security Advisory: cryptsetup security, bug fix, and enhancement update

Bulletin has no description...

Photon OS 4.0: Cryptsetup PHSA-2022-4.0-0145

An update of the cryptsetup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0145. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

OPENSUSE-SU-2024:10704-1 cryptsetup-2.4.1-1.1 on GA media

These are all security issues fixed in the cryptsetup-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11754-1 cryptsetup-2.4.3-1.1 on GA media

These are all security issues fixed in the cryptsetup-2.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

btrfsutil (0.2.0), btrfsutil-fake (>=0.2.0-8324fe2, <=0.2.0) +15 more potentially affected by unknown CVE via loopdev (>=0.1.3, <=0.4.0)

loopdev CARGO version =0.1.3, =0.2.0-8324fe2, =0.1.0, =0.1.0, =0.6.3, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =2.4.2, =3.5.8 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0088...

Rocky Linux 8 : cryptsetup (RLSA-2022:0370)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0370 advisory. - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical...

Huawei EulerOS: Security Advisory for cryptsetup (EulerOS-SA-2023-2033)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.1 : cryptsetup (EulerOS-SA-2023-2033)

According to the versions of the cryptsetup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the...

Huawei EulerOS: Security Advisory for cryptsetup (EulerOS-SA-2023-2085)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.11.0 : cryptsetup (EulerOS-SA-2023-2085)

According to the versions of the cryptsetup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the...

cryptsetup bug fix and enhancement update

An update is available for cryptsetup. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8...

The vulnerability of the `hdr_validate_segments()` function in the `lib/luks2/luks2_json_metadata.c` file of the Cryptsetup encryption software allows a hacker to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the hdrvalidatesegments function in the lib/luks2/luks2jsonmetadata.c file of the Cryptsetup encryption program is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and caus...

Amazon Linux 2023 : cryptsetup, cryptsetup-devel, cryptsetup-libs (ALAS2023-2023-027)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-027 advisory. It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk...

SUSE CVE-2016-4484

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password...