high
7.8
CWE
787
Advisory Published
CVE Published
CVE Published
Updated

CVE-2020-14382

First published: Wed Sep 02 2020(Updated: )

A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be *tricked* to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory.

Credit: secalert@redhat.com secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
Cryptsetup Project Cryptsetup=2.2.0
Redhat Enterprise Linux=8.0
Canonical Ubuntu Linux=20.04
Fedoraproject Fedora=31
Fedoraproject Fedora=33
redhat/cryptsetup<2.3.4
2.3.4
ubuntu/cryptsetup<2:2.2.2-3ubuntu2.2
2:2.2.2-3ubuntu2.2
debian/cryptsetup
2:2.3.7-1+deb11u1
2:2.6.1-4~deb12u2
2:2.7.2-2
2:2.7.4-1

Remedy

https://bugzilla.redhat.com/show_bug.cgi?id=1874712

Remedy

https://gitlab.com/cryptsetup/cryptsetup/-/commit/52f5cb8cedf22fb3e14c744814ec8af7614146c7

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the vulnerability ID of this vulnerability?

    The vulnerability ID of this vulnerability is CVE-2020-14382.

  • What is the severity of CVE-2020-14382?

    CVE-2020-14382 has a severity of 7.8 (High).

  • What software versions are affected by CVE-2020-14382?

    CVE-2020-14382 affects cryptsetup versions up to but excluding 2.3.4.

  • How can I fix CVE-2020-14382?

    To fix CVE-2020-14382, you need to update cryptsetup to version 2.3.4.

  • Where can I find more information about CVE-2020-14382?

    More information about CVE-2020-14382 can be found at the following references: [link1], [link2], [link3].

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203