Google Fscrypt
4 CVEs affecting Google Fscrypt. Latest disclosed: 2022-02-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6558 | Medium | 6.5 | 2018-08-23 | The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which a… |
CVE-2022-25327 | Medium | 5.5 | 2022-02-25 | The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from… |
CVE-2022-25326 | Medium | 5.5 | 2022-02-25 | fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We… |
CVE-2022-25328 | Medium | 5.0 | 2022-02-25 | The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circums… |