Описание
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 0.3.3-1 |
| esm-apps/bionic | needed | |
| esm-apps/focal | needed | |
| esm-apps/jammy | not-affected | 0.3.3-1 |
| esm-apps/noble | not-affected | 0.3.3-1 |
| esm-apps/resolute | not-affected | 0.3.3-1 |
| focal | ignored | end of standard support, was needed |
| impish | ignored | end of life |
| jammy | not-affected | 0.3.3-1 |
Показывать по
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.
fscrypt through v0.3.2 creates a world-writable directory by default w ...
Uncontrolled Resource Consumption in github.com/google/fscrypt
ALT-PU-2023-1941: package `fscrypt` update to version 0.3.4-alt1
EPSS
2.1 Low
CVSS2
5.5 Medium
CVSS3