CVE-2022-25327 — Local Denial of Service in fscrypt PAM module

CVE-2022-25327

Local Denial of Service in fscrypt PAM module PUBLISHED

Description (CNA)

The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from logging in. A local user can cause a denial of service by creating a fscrypt metadata file that prevents other users from logging into the system. We recommend upgrading to version 0.3.3 or above

Affected (CNA)

Vendor / product	Versions
Google LLC / fscrypt	affected unspecified through 0.3.2

CWE

CWE-255

References

https://github.com/google/fscrypt/pull/346

ADP enrichment

CVE

No English description supplied.

https://github.com/google/fscrypt/pull/346

CISA-ADP

No English description supplied.

No references supplied.