CVE-2002-0570: Low severity Linux Linux kernel vulnerability
Published Jun 11, 2002
·Updated
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.
Affected Software
39 affected components
Linux Linux kernel=2.4.15
Linux Linux kernel=2.2.10
Linux Linux kernel=2.4.11
Linux Linux kernel=2.2.13
Linux Linux kernel=2.2.0
Linux Linux kernel=2.2.6
Linux Linux kernel=2.4.12
Linux Linux kernel=2.4.13
Linux Linux kernel=2.2.18
Linux Linux kernel=2.2.3
Linux Linux kernel=2.4.17
Linux Linux kernel=2.2.2
Linux Linux kernel=2.2.5
Linux Linux kernel=2.4.7
Linux Linux kernel=2.2.8
Linux Linux kernel=2.4.9
Linux Linux kernel=2.2.7
Linux Linux kernel=2.2.16
Linux Linux kernel=2.2.1
Linux Linux kernel=2.2.12
Linux Linux kernel=2.4.10
Linux Linux kernel=2.4.0
Linux Linux kernel=2.4.2
Linux Linux kernel=2.4.16
Linux Linux kernel=2.4.8
Linux Linux kernel=2.4.14
Linux Linux kernel=2.2.19
Linux Linux kernel=2.2.20
Linux Linux kernel=2.4.5
Linux Linux kernel=2.2.15
Linux Linux kernel=2.2.4
Linux Linux kernel=2.4.3
Linux Linux kernel=2.2.14
Linux Linux kernel=2.2.11
Linux Linux kernel=2.4.1
Linux Linux kernel=2.4.4
Linux Linux kernel=2.2.17
Linux Linux kernel=2.4.6
Linux Linux kernel=2.2.9
Event History
Jun 11, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0570?
CVE-2002-0570 is considered a moderate severity vulnerability due to its potential impact on confidentiality.
2
How do I fix CVE-2002-0570?
To fix CVE-2002-0570, upgrade to Linux kernel version 2.4.15 or later, or a more recent version.
3
Who is affected by CVE-2002-0570?
CVE-2002-0570 affects local users on systems running the Linux kernel versions 2.4.10 and earlier.
4
What type of vulnerability is CVE-2002-0570?
CVE-2002-0570 is an authentication vulnerability that allows unauthorized modification of encrypted data.
5
When was CVE-2002-0570 discovered?
CVE-2002-0570 was publicly disclosed in January 2002.