Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-1070

Низкий

ALT-PU-2022-1070: package cryptsetup update to version 2.4.3-alt1

Источник
errata.altlinux.org
Дата публикации
18.01.2022
Дата обновления
18.01.2022
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades cryptsetup to version 2.4.3-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 4 лет назад

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

CVSS3: 5.9
redhat
почти 5 лет назад

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

CVSS3: 4.3
nvd
около 4 лет назад

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

CVSS3: 4.3
msrc
около 4 лет назад

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium such as a flash disk could use this flaw to force a user into permanently disabling the encryption layer of that medium.

CVSS3: 4.3
debian
около 4 лет назад

It was found that a specially crafted LUKS header could trick cryptset ...