The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/google/fscrypt/pull/346 |
Configurations
No configuration.
Information
Published : 2022-02-25 11:15
Updated : 2022-02-25 12:57
NVD link : CVE-2022-25327
Mitre link : CVE-2022-25327
JSON object : View
Products Affected
No product.
CWE
No CWE.
