A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container. The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for possible overflow on memory allocation used for intervals array (see statement "intervals = malloc(first_backup * sizeof(*intervals));"). Due to the bug, library can be *tricked* to expect such allocation was successful but for far less memory then originally expected. Later it may read data FROM image crafted by an attacker and actually write such data BEYOND allocated memory.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:4542 advisory.

  - A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format     validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container.
    The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function     hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for     possible overflow on memory allocation used for intervals array (see statement intervals =     malloc(first_backup * sizeof(*intervals));). Due to the bug, library can be *tricked* to expect such     allocation was successful but for far less memory then originally expected. Later it may read data FROM     image crafted by an attacker and actually write such data BEYOND allocated memory. (CVE-2020-14382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the cryptsetup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A vulnerability was found in upstream release     cryptsetup-2.2.0 where, there's a bug in LUKS2 format     validation code, that is effectively invoked on every     device/image presenting itself as LUKS2 container. The     bug is in segments validation code in file     'lib/luks2/luks2_json_metadata.c' in function     hdr_validate_segments(struct crypt_device *cd,     json_object *hdr_jobj) where the code does not check     for possible overflow on memory allocation used for     intervals array (see statement 'intervals =     malloc(first_backup * sizeof(*intervals))'). Due to the     bug, library can be *tricked* to expect such allocation     was successful but for far less memory then originally     expected. Later it may read data FROM image crafted by     an attacker and actually write such data BEYOND     allocated memory.(CVE-2020-14382)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cryptsetup package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A vulnerability was found in upstream release     cryptsetup-2.2.0 where, there's a bug in LUKS2 format     validation code, that is effectively invoked on every     device/image presenting itself as LUKS2 container. The     bug is in segments validation code in file     'lib/luks2/luks2_json_metadata.c' in function     hdr_validate_segments(struct crypt_device *cd,     json_object *hdr_jobj) where the code does not check     for possible overflow on memory allocation used for     intervals array (see statement 'intervals =     malloc(first_backup * sizeof(*intervals))'). Due to the     bug, library can be *tricked* to expect such allocation     was successful but for far less memory then originally     expected. Later it may read data FROM image crafted by     an attacker and actually write such data BEYOND     allocated memory.(CVE-2020-14382)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has cryptsetup packages installed that are affected by a vulnerability:

  - A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format     validation code, that is effectively invoked on every device/image presenting itself as LUKS2 container.
    The bug is in segments validation code in file 'lib/luks2/luks2_json_metadata.c' in function     hdr_validate_segments(struct crypt_device *cd, json_object *hdr_jobj) where the code does not check for     possible overflow on memory allocation used for intervals array (see statement intervals =     malloc(first_backup * sizeof(*intervals));). Due to the bug, library can be *tricked* to expect such     allocation was successful but for far less memory then originally expected. Later it may read data FROM     image crafted by an attacker and actually write such data BEYOND allocated memory. (CVE-2020-14382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4542 advisory.

  - cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0258 advisory.

    The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.

    Security Fix(es):

    * cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4542 advisory.

    [2.3.3-2]
    - patch: Fix possible memory corruption in LUKS2 validation              code in 32bit library.
    - Resolves: #1872294

    [2.3.3-1]
    - Update to cryptsetup 2.3.3
    - Resolves: #1796826 #1743891 #1785748

    [2.3.1-1]
    - Update to cryptsetup 2.3.1
    - Resolves: #1796826 #1743891 #1785748

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4542 advisory.

    The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.

    The following packages have been upgraded to a later upstream version: cryptsetup (2.3.3). (BZ#1796826)

    Security Fix(es):

    * cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4900 advisory.

    The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.

    Security Fix(es):

    * cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the cryptsetup packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A vulnerability was found in upstream release     cryptsetup-2.2.0 where, there's a bug in LUKS2 format     validation code, that is effectively invoked on every     device/image presenting itself as LUKS2 container. The     bug is in segments validation code in file     'lib/luks2/luks2_json_metadata.c' in function     hdr_validate_segments(struct crypt_device *cd,     json_object *hdr_jobj) where the code does not check     for possible overflow on memory allocation used for     intervals array (see statement 'intervals =     malloc(first_backup * sizeof(*intervals))'). Due to the     bug, library can be *tricked* to expect such allocation     was successful but for far less memory then originally     expected. Later it may read data FROM image crafted by     an attacker and actually write such data BEYOND     allocated memory.(CVE-2020-14382)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to cryptsetup 2.3.4. Security fix for CVE-2020-14382

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4493-1 advisory.

    It was discovered that cryptsetup incorrectly handled certain inputs. An attacker could possibly use this     issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
157644	AlmaLinux 8 : cryptsetup (ALSA-2020:4542)	Nessus	Alma Linux Local Security Checks	high
147689	EulerOS Virtualization 2.9.0 : cryptsetup (EulerOS-SA-2021-1656)	Nessus	Huawei Local Security Checks	high
147604	EulerOS Virtualization 2.9.1 : cryptsetup (EulerOS-SA-2021-1594)	Nessus	Huawei Local Security Checks	high
147249	NewStart CGSL MAIN 6.02 : cryptsetup Vulnerability (NS-SA-2021-0087)	Nessus	NewStart CGSL Local Security Checks	high
145904	CentOS 8 : cryptsetup (CESA-2020:4542)	Nessus	CentOS Local Security Checks	high
145443	RHEL 8 : cryptsetup (RHSA-2021:0258)	Nessus	Red Hat Local Security Checks	high
142760	Oracle Linux 8 : cryptsetup (ELSA-2020-4542)	Nessus	Oracle Linux Local Security Checks	high
142380	RHEL 8 : cryptsetup (RHSA-2020:4542)	Nessus	Red Hat Local Security Checks	high
142374	RHEL 8 : cryptsetup (RHSA-2020:4900)	Nessus	Red Hat Local Security Checks	high
142316	EulerOS 2.0 SP9 : cryptsetup (EulerOS-SA-2020-2409)	Nessus	Huawei Local Security Checks	high
142253	EulerOS 2.0 SP9 : cryptsetup (EulerOS-SA-2020-2427)	Nessus	Huawei Local Security Checks	high
140672	Fedora 31 : cryptsetup (2020-5ed5af6275)	Nessus	Fedora Local Security Checks	high
140589	Ubuntu 20.04 LTS : cryptsetup vulnerability (USN-4493-1)	Nessus	Ubuntu Local Security Checks	high
140306	Fedora 32 : cryptsetup (2020-965e406543)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2020-14382

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high