Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/google/fscrypt

4 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 medium
Registry
pkg.go.dev

Advisories 4

  • CVE-2022-25328Medium 5.0

    Privilege escalation through command injection in fscrypt

    Affected: fixed in 0.3.3.

  • CVE-2022-25327Medium 5.5

    Local Denial of Service in fscrypt PAM module

    Affected: fixed in 0.3.3.

  • CVE-2022-25326Medium 5.5

    Denial of Service in fscrypt

    Affected: fixed in 0.3.3.

  • The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with…

    Affected: fixed in 0.2.4.