Login Request a demo
CR
Product
Cryptsetup
by Cryptsetup Project · last CVE Aug 24, 2022
3
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cryptsetup to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14382
7.8
1%
Sep 16
A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting…
Affected: 2.2.0
CVE-2016-4484
6.8
1%
Jan 23
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid…
Affected: through 2.1.7.3-2
CVE-2021-4122
4.3
0%
Aug 24
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device
Affected: before 2.3.7; 2.4.0 before 2.4.3
Showing 3