Red Hat Security Advisory

RHSA-2020:4900

cryptsetup security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.1) cryptsetup-devel-2.2.0-2.el8_1.1
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) cryptsetup-2.2.0-2.el8_1.1, cryptsetup-libs-2.2.0-2.el8_1.1, cryptsetup-reencrypt-2.2.0-2.el8_1.1 +2

Fixes 1 record

TI-2020-11250 CVE-2020-14382 · GHSA-v8mw-xqhr-2vqp

Out-of-bounds write in cryptsetup

LOW 36

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01157 Published 2020-09-16 Fixed CWE-787