cryptsetup
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-4122 | Fixed in cryptsetup 2.4.3, cryptsetup 2.3.7 | It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An att | MEDIUM 4.3 | 0.3 % | ||
| CVE-2020-14382 | cryptsetup-2.2.0 | A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively inv | HIGH 7.8 | 1.2 % |