CVE-2014-2884

Опубликовано: 19 мар. 2018

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a (1) TC_IOCTL_OPEN_TEST or (2) TC_IOCTL_GET_SYSTEM_DRIVE_CONFIG IOCTL call.

Ссылки

http://www.openwall.com/lists/oss-security/2014/04/17/7
Issue Tracking
Mailing List
https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf
Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/04/17/7
Issue Tracking
Mailing List
https://opencryptoaudit.org/reports/iSec_Final_Open_Crypto_Audit_Project_TrueCrypt_Security_Assessment.pdf
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:truecrypt_project:truecrypt:7.1:a:*:*:*:*:*:*

EPSS

Процентиль: 10%

0.00035

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2014-2884

CVSS3: 3.3

debian

почти 8 лет назад

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt ...

GHSA-52xg-h2f5-qwqf

CVSS3: 3.3

github

больше 3 лет назад

EPSS

Процентиль: 10%

0.00035

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200