Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mpq4-rjj8-fjph

Опубликовано: 26 фев. 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.5

Описание

Uncontrolled Resource Consumption in github.com/google/fscrypt

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

Пакеты

Наименование

github.com/google/fscrypt

go
Затронутые версииВерсия исправления

< 0.3.3

0.3.3

EPSS

Процентиль: 2%
0.00013
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

CVSS3: 5.5
nvd
почти 4 года назад

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

CVSS3: 5.5
debian
почти 4 года назад

fscrypt through v0.3.2 creates a world-writable directory by default w ...

EPSS

Процентиль: 2%
0.00013
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400