Cryptsetup Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cryptsetup Project records in CISA KEV

No Cryptsetup Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cryptsetup 3 records LOW

Records

3 records in Cryptsetup · all components

TI-2020-11250 CVE-2020-14382 · GHSA-v8mw-xqhr-2vqp

Out-of-bounds write in cryptsetup

LOW 36

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01157 Published 2020-09-16 Fixed CWE-787

TI-2016-03855 CVE-2016-4484 · GHSA-gv5v-vgx2-hgvr

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows…

LOW 31

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00709 Published 2017-01-23 Will not fix CWE-287

TI-2021-02998 CVE-2021-4122 · GHSA-8fgw-wvm8-3x84

Insufficient verification of data authenticity in cryptsetup

LOW 20

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.

CVSS 3.1MEDIUM 4.3 Physical No auth User interaction EPSS 0.00319 Published 2022-08-24 Fixed CWE-345

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0