CVE-2022-25327mediumCWE-255

Local Denial of Service in fscrypt PAM module

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.1%

probabilidade de exploração

0.1%top 98% das CVEs

exploração observada

nãonenhuma fonte reporta

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Google LLC · fscrypt

Referências

https://github.com/google/fscrypt/pull/346