Vulnerabilities > Cryptsetup Project

DATE CVE VULNERABILITY TITLE RISK
2020-09-16 CVE-2020-14382 Out-of-bounds Write vulnerability in multiple products
A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container.
7.8
2017-01-23 CVE-2016-4484 Improper Authentication vulnerability in Cryptsetup Project Cryptsetup
The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.
local
low complexity
cryptsetup-project CWE-287
7.2