Red Hat Security Advisory

RHSA-2020:4542

cryptsetup security, bug fix, and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) cryptsetup-devel-2.3.3-2.el8
Red Hat Enterprise Linux BaseOS (v. 8) cryptsetup-2.3.3-2.el8, cryptsetup-libs-2.3.3-2.el8, cryptsetup-reencrypt-2.3.3-2.el8 +2

Fixes 1 record

TI-2020-11250 CVE-2020-14382 · GHSA-v8mw-xqhr-2vqp

Out-of-bounds write in cryptsetup

LOW 36

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01157 Published 2020-09-16 Fixed CWE-787