cryptsetup project records

3 published records for vendor cryptsetup project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2020-14382No exploit	A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invcryptsetup project · cryptsetup · CWE-787 Memory safety	High7.8	—	1.2%	Sep 16, 2020
27Monitor	CVE-2016-4484No exploit	The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via mancryptsetup project · cryptsetup · CWE-287 Auth bypass	Medium6.8	—	0.7%	Jan 23, 2017
17Monitor	CVE-2021-4122No exploit	It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.cryptsetup project · cryptsetup · CWE-345	Medium4.3	—	0.3%	Aug 24, 2022

CVE-2020-14382
31Monitor
A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively inv
HighCVSS 7.8No exploitEPSS 1%
- Memory safety
cryptsetup project · cryptsetupSep 16, 2020
CVE-2016-4484
27Monitor
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via man
MediumCVSS 6.8No exploitEPSS 1%
- Auth bypass
cryptsetup project · cryptsetupJan 23, 2017
CVE-2021-4122
17Monitor
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.
MediumCVSS 4.3No exploitEPSS 0%
cryptsetup project · cryptsetupAug 24, 2022