Fscrypt (Google) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2022-02-25. Vendor: Google.

CVEs of Fscrypt

• CVE-2022-25326 - CVSS 5.5 (medium), 2022-02-25: fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We…
• CVE-2022-25328 - CVSS 7.3 (high), 2022-02-25: The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of…
• CVE-2022-25327 - CVSS 5.5 (medium), 2022-02-25: The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from…
• CVE-2018-6558 - CVSS 6.5 (medium), 2018-08-23: The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which…