CVE-2012-4578: Low severity pawel jakub dawidek geli vulnerability
The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4578?
CVE-2012-4578 is considered a medium-severity vulnerability due to its potential to allow local users to decrypt sensitive information.
How do I fix CVE-2012-4578?
To fix CVE-2012-4578, upgrade the geli encryption provider to version 7 r239184 or later on FreeBSD 10.
Who is affected by CVE-2012-4578?
CVE-2012-4578 affects users utilizing the geli encryption provider version 7 before r239184 on FreeBSD 10 and is particularly relevant for local users.
What kind of attack does CVE-2012-4578 allow?
CVE-2012-4578 can be exploited using a brute-force attack against a weak Master Key, compromising encrypted data.
Is there a workaround for CVE-2012-4578?
While the best solution is to upgrade, users can temporarily strengthen password complexity to help mitigate the immediate risks of CVE-2012-4578.