Login Request a demo
FS
Product
Fscrypt
by Google · last CVE Feb 25, 2022
4
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fscrypt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-6558
6.5
1%
Aug 23
The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to…
Affected: before 0.2.4
CVE-2022-25327
5.5
0%
Feb 25
The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in
Affected: before 0.3.3
CVE-2022-25326
5.5
0%
Feb 25
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space
Affected: through 0.3.2
Showing 3