Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8vwm-8vj8-rqjf

Опубликовано: 26 фев. 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.5

Описание

User login denial of service in github.com/google/fscrypt

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

Пакеты

Наименование

github.com/google/fscrypt

go
Затронутые версииВерсия исправления

< 0.3.3

0.3.3

EPSS

Процентиль: 1%
0.00011
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

CVSS3: 5.5
nvd
почти 4 года назад

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

CVSS3: 5.5
debian
почти 4 года назад

The PAM module for fscrypt doesn't adequately validate fscrypt metadat ...

EPSS

Процентиль: 1%
0.00011
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-276