Vulnerability in Matt Blaze Cryptographic File System
CVE-2006-3123
Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.
EPSS: 0.004 (29.2th percentile) — read the EPSS interpretation.
Affected products
- Matt_blaze Cryptographic_file_system — versions 1.4.1
- N/a — versions n/a
References
- security@debian.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
- security@debian.org (vdb-entry, x_refsource_BID)
- security@debian.org (x_refsource_CONFIRM, x_refsource_MISC)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_XF)