Cryptsetup hdr_validate_segments() Heap Buffer Overflow DoS

The vulnerability of the hdrvalidatesegments function in the lib/luks2/luks2jsonmetadata.c file of the Cryptsetup encryption program is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and caus...

CVE-2020-14382

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2jsonmetadata.c' in function...

CVE-2020-14382: Out-of-bounds Write

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2jsonmetadata.c' in function...