Описание
The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| encfs | fixed | 1.8.1-1 | package | |
| encfs | no-dsa | jessie | package | |
| encfs | no-dsa | squeeze | package | |
| encfs | no-dsa | wheezy | package |
Примечания
Shortcoming documented in 1.7.4-4
https://defuse.ca/audits/encfs.htm
Upstream issue: https://github.com/vgough/encfs/issues/14
https://github.com/vgough/encfs/commit/9d06412f1c68b0607f27f2a4434a2801fa807a2d (v1.8.1)
EPSS
Связанные уязвимости
The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".
EPSS