cryptsetup Project cryptsetup 1.4.2

CPE Details

cryptsetup Project cryptsetup 1.4.2
cryptsetup_project
cryptsetup
1.4.2
2020-09-21
09h44 +00:00
2020-09-21
09h44 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cryptsetup_project:cryptsetup:1.4.2:*:*:*:*:*:*:*

Informations

Vendor

cryptsetup_project

Product

cryptsetup

Version

1.4.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-4122 2022-08-24 13h08 +00:00 It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.
4.3
Medium
CVE-2016-4484 2017-01-23 20h00 +00:00 The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
6.8
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.