Lucene search
Veracode Vulnerability DatabaseVERACODE:27125HistorySep 21, 2020 - 6:37 a.m.
Arbitrary Code Execution
2020-09-2106:37:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
arbitrary code execution
buffer-overflow
luks2 format validation
EPSS
0.001
Percentile
43.5%
cryptsetup is vulnerable to arbitrary code execution. A buffer-overflow in the LUKS2 format validation code in the function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) in lib/luks2/luks2_json_metadata.c allows an attacker to write beyond allocated memory and potentially perform arbitrary code execution on the hoste OS.
Affected configurations
Node
-cryptsetup\Matchfocal2\2.2.2-3ubuntu2
OR-cryptsetup\Match3.112.2.2-r0
OR-cryptsetup\Match3.122.3.2-r0
ORcryptsetupMatch2.2.2_1.el8
ORcryptsetupMatch2.0.6_1.el8
ORcryptsetupMatch2.3.1_1.el8
ORcryptsetupMatch2.2.0_2.el8
ORcryptsetupMatch2.3.3_1.el8
OR-cryptsetup\Matchedge2.3.1-r0
OR-cryptsetup\Matchedge2.3.0-r0
OR-cryptsetup\Matchedge2.3.3-r0
OR-cryptsetup\Matchedge2.3.2-r0
OR-cryptsetup\Matchedge2.3.1-r1
OR-cryptsetup\Matchfocal2\2.2.2-3ubuntu2
OR-cryptsetup\Match3.112.2.2-r0
OR-cryptsetup\Match3.122.3.2-r0
ORcryptsetupMatch2.2.2_1.el8
ORcryptsetupMatch2.0.6_1.el8
ORcryptsetupMatch2.3.1_1.el8
ORcryptsetupMatch2.2.0_2.el8
ORcryptsetupMatch2.3.3_1.el8
OR-cryptsetup\Matchedge2.3.1-r0
OR-cryptsetup\Matchedge2.3.0-r0
OR-cryptsetup\Matchedge2.3.3-r0
OR-cryptsetup\Matchedge2.3.2-r0
OR-cryptsetup\Matchedge2.3.1-r1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | cryptsetup\ | focal | cpe:2.3:a:-:cryptsetup\:focal:2\:2.2.2-3ubuntu2:*:*:*:*:*:*:* |
| - | cryptsetup\ | 3.11 | cpe:2.3:a:-:cryptsetup\:3.11:2.2.2-r0:*:*:*:*:*:*:* |
| - | cryptsetup\ | 3.12 | cpe:2.3:a:-:cryptsetup\:3.12:2.3.2-r0:*:*:*:*:*:*:* |
| * | cryptsetup | 2.2.2_1.el8 | cpe:2.3:a:*:cryptsetup:2.2.2_1.el8:*:*:*:*:*:*:* |
| * | cryptsetup | 2.0.6_1.el8 | cpe:2.3:a:*:cryptsetup:2.0.6_1.el8:*:*:*:*:*:*:* |
| * | cryptsetup | 2.3.1_1.el8 | cpe:2.3:a:*:cryptsetup:2.3.1_1.el8:*:*:*:*:*:*:* |
| * | cryptsetup | 2.2.0_2.el8 | cpe:2.3:a:*:cryptsetup:2.2.0_2.el8:*:*:*:*:*:*:* |
| * | cryptsetup | 2.3.3_1.el8 | cpe:2.3:a:*:cryptsetup:2.3.3_1.el8:*:*:*:*:*:*:* |
| - | cryptsetup\ | edge | cpe:2.3:a:-:cryptsetup\:edge:2.3.1-r0:*:*:*:*:*:*:* |
| - | cryptsetup\ | edge | cpe:2.3:a:-:cryptsetup\:edge:2.3.0-r0:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2020-14382
2020-09-16 14:37:52
nessus
nessus
RHEL 8 : cryptsetup (RHSA-2021:0258)
2021-01-26 00:00:00
AlmaLinux 8 : cryptsetup (ALSA-2020:4542)
2022-02-09 00:00:00
CentOS 8 : cryptsetup (CESA-2020:4542)
2021-02-01 00:00:00
debiancve
debiancve
CVE-2020-14382
2020-09-16 15:15:12
redhatcve
redhatcve
CVE-2020-14382
2020-09-03 02:20:35
openvas
openvas
Huawei EulerOS: Security Advisory for cryptsetup (EulerOS-SA-2021-1656)
2021-03-12 00:00:00
Huawei EulerOS: Security Advisory for cryptsetup (EulerOS-SA-2020-2409)
2020-11-04 00:00:00
Huawei EulerOS: Security Advisory for cryptsetup (EulerOS-SA-2020-2427)
2020-11-04 00:00:00
osv
osv
CVE-2020-14382
2020-09-16 15:15:12
Red Hat Security Advisory: cryptsetup security update
2024-09-16 04:22:25
cryptsetup vulnerability
2020-09-14 12:23:03
ubuntucve
ubuntucve
CVE-2020-14382
2020-09-03 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: cryptsetup-2.3.4-1.fc33
2020-09-25 17:14:50
[SECURITY] Fedora 32 Update: cryptsetup-2.3.4-1.fc32
2020-09-07 17:15:06
[SECURITY] Fedora 31 Update: cryptsetup-2.3.4-1.fc31
2020-09-19 22:45:19
ubuntu
ubuntu
cryptsetup vulnerability
2020-09-14 00:00:00
cve
cve
CVE-2020-14382
2020-09-16 15:15:12
redhat
redhat
(RHSA-2020:4900) Moderate: cryptsetup security update
2020-11-04 09:28:47
(RHSA-2021:0258) Moderate: cryptsetup security update
2021-01-26 10:29:27
oraclelinux
oraclelinux
cryptsetup security, bug fix, and enhancement update
2020-11-10 00:00:00
almalinux
almalinux
Moderate: cryptsetup security, bug fix, and enhancement update
2020-11-03 12:14:05
nvd
nvd
CVE-2020-14382
2020-09-16 15:15:12
prion
prion
Design/Logic Flaw
2020-09-16 15:15:00
alpinelinux
alpinelinux
CVE-2020-14382
2020-09-16 15:15:12