Skip to content
Sign in
5.5 Medium

CVE-2022-25326 fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged…

Description

fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.

Affected products and versions

Product Affected versions Fixed in
fscrypt 0.3 earliest → 0.3.2 No fix stated

Other CVEs of fscrypt

The 3 CVEs of fscrypt →
CVE-2022-25328 The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege… 5.0 Medium CVE-2022-25327 The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious… 5.5 Medium
Track this CVE