Skip to content
Sign in
5.5 Medium

CVE-2022-25327 The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious…

Description

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

Affected products and versions

Product Affected versions Fixed in
fscrypt 0.3 earliest → 0.3.2 No fix stated

Other CVEs of fscrypt

The 3 CVEs of fscrypt →
CVE-2022-25328 The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege… 5.0 Medium CVE-2022-25326 fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged… 5.5 Medium
Track this CVE