It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

An update of the cryptsetup package has been released.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0370 advisory.

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cryptsetup packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-027 advisory.

    It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cryptsetup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-174 advisory.

    It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-064 advisory.

    It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:0370 advisory.

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5286-1 advisory.

    Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with     physical access to modify the encrypted device header may trigger the device to be unencrypted the next     time it is mounted by the user.

    On Ubuntu 20.04 LTS, this issue was fixed by disabling the online reencryption feature.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5070 advisory.

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:370 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-0370 advisory.

    - patch: fix CVE-2021-4122.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0370 advisory.

    The cryptsetup packages provide a utility for setting up disk encryption using the dm-crypt kernel module.

    Security Fix(es):

    * cryptsetup: disable encryption via header rewrite (CVE-2021-4122)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0144-1 advisory.

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0144-1 advisory.

  - It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during     the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could     use this flaw to force a user into permanently disabling the encryption layer of that medium.
    (CVE-2021-4122)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
203235	Photon OS 4.0: Cryptsetup PHSA-2022-4.0-0145	Nessus	PhotonOS Local Security Checks	medium
185075	Rocky Linux 8 : cryptsetup (RLSA-2022:0370)	Nessus	Rocky Linux Local Security Checks	medium
176867	EulerOS Virtualization 2.11.1 : cryptsetup (EulerOS-SA-2023-2033)	Nessus	Huawei Local Security Checks	medium
176824	EulerOS Virtualization 2.11.0 : cryptsetup (EulerOS-SA-2023-2085)	Nessus	Huawei Local Security Checks	medium
173121	Amazon Linux 2023 : cryptsetup, cryptsetup-devel, cryptsetup-libs (ALAS2023-2023-027)	Nessus	Amazon Linux Local Security Checks	medium
169562	EulerOS 2.0 SP11 : cryptsetup (EulerOS-SA-2023-1029)	Nessus	Huawei Local Security Checks	medium
169557	EulerOS 2.0 SP11 : cryptsetup (EulerOS-SA-2023-1004)	Nessus	Huawei Local Security Checks	medium
169337	EulerOS Virtualization 2.10.1 : cryptsetup (EulerOS-SA-2022-2888)	Nessus	Huawei Local Security Checks	medium
169320	EulerOS Virtualization 2.10.0 : cryptsetup (EulerOS-SA-2022-2870)	Nessus	Huawei Local Security Checks	medium
166993	Amazon Linux 2022 : cryptsetup, cryptsetup-devel, cryptsetup-libs (ALAS2022-2022-174)	Nessus	Amazon Linux Local Security Checks	medium
165804	EulerOS 2.0 SP10 : cryptsetup (EulerOS-SA-2022-2411)	Nessus	Huawei Local Security Checks	medium
165796	EulerOS 2.0 SP10 : cryptsetup (EulerOS-SA-2022-2424)	Nessus	Huawei Local Security Checks	medium
165378	EulerOS Virtualization 2.9.1 : cryptsetup (EulerOS-SA-2022-2339)	Nessus	Huawei Local Security Checks	medium
165056	EulerOS 2.0 SP9 : cryptsetup (EulerOS-SA-2022-2308)	Nessus	Huawei Local Security Checks	medium
164725	Amazon Linux 2022 : cryptsetup, cryptsetup-devel, cryptsetup-libs (ALAS2022-2022-064)	Nessus	Amazon Linux Local Security Checks	medium
158863	AlmaLinux 8 : cryptsetup (ALSA-2022:0370)	Nessus	Alma Linux Local Security Checks	medium
158072	Ubuntu 20.04 LTS : cryptsetup vulnerability (USN-5286-1)	Nessus	Ubuntu Local Security Checks	medium
157886	Debian DSA-5070-1 : cryptsetup - security update	Nessus	Debian Local Security Checks	medium
157786	Rocky Linux 8 : cryptsetup (RLSA-2022:370)	Nessus	Rocky Linux Local Security Checks	medium
157316	Oracle Linux 8 : cryptsetup (ELSA-2022-0370)	Nessus	Oracle Linux Local Security Checks	medium
157314	RHEL 8 : cryptsetup (RHSA-2022:0370)	Nessus	Red Hat Local Security Checks	medium
156942	openSUSE 15 Security Update : cryptsetup (openSUSE-SU-2022:0144-1)	Nessus	SuSE Local Security Checks	medium
156928	SUSE SLED15 / SLES15 Security Update : cryptsetup (SUSE-SU-2022:0144-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2021-4122

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium