Google Fscrypt: vulnerabilidades y CVE
Google Fscrypt tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-25328 | Alta (7.3) | 0.20% | — | 25 feb 2022 | The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths… |
| CVE-2022-25327 | Media (5.5) | 0.11% | — | 25 feb 2022 | The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by… |
| CVE-2022-25326 | Media (5.5) | 0.13% | — | 25 feb 2022 | fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting… |
| CVE-2018-6558 | Media (6.5) | 0.62% | — | 23 ago 2018 | The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login… |
📰 Noticias relacionadas
- Alerta Google corrige tres vulnerabilidades en Chrome, una de ellas crítica en WebGL que permite escapar del sandbox
- Alerta Google corrige 95 vulnerabilidades en Chrome, 23 de ellas críticas, en su última actualización del canal estable
- Alerta Google corrige dos vulnerabilidades críticas en Cloud Application Integration sin requerir acción de los clientes