Homepage
About Snyk

Out-of-bounds Write Affecting cryptsetup-libs package, versions <0:2.3.3-2.el8

medium

Snyk CVSS

    Attack Complexity Low
    User Interaction Required
    Confidentiality High
    Integrity High
    Availability High

    Threat Intelligence

    EPSS 0.09% (39th percentile)
Expand this section
NVD
7.8 high
Expand this section
Red Hat
7.8 high

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-CENTOS8-CRYPTSETUPLIBS-2073646
  • published 26 Jul 2021
  • disclosed 3 Sep 2020
Report a new vulnerability Found a mistake?

Introduced: 3 Sep 2020

CVE-2020-14382 Open this link in a new tab
CWE-787 Open this link in a new tab

How to fix?

Upgrade Centos:8 cryptsetup-libs to version 0:2.3.3-2.el8 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream cryptsetup-libs package and not the cryptsetup-libs package as distributed by Centos. See How to fix? for Centos:8 relevant fixed versions and status.

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be tricked to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory.