EUVD-2020-6522

Malware in sbrugna...

NewStart CGSL MAIN 6.02 : cryptsetup Vulnerability (NS-SA-2021-0087)

"The remote NewStart CGSL host, running version MAIN 6.02, has cryptsetup packages installed that are affected by a vulnerability: - A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/ima...

Arbitrary Code Execution

cryptsetup is vulnerable to arbitrary code execution. A buffer-overflow in the LUKS2 format validation code in the function hdrvalidatesegmentsstruct cryptdevice cd, jsonobject hdrjobj in lib/luks2/luks2jsonmetadata.c allows an attacker to write beyond allocated memory and potentially perform...