CVE-2023-0751mediumCWE-20

CVE-2023-0751: falha de média gravidade em FreeBSD

GELI silently omits the keyfile if read from stdin

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FreeBSD

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.6%
When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
FreeBSD · FreeBSD
CVEs relacionadas — FreeBSD

No mesmo produto, das mais perigosas para as menos.

CVE-2018-17157—CVE-2018-17157EPSS 24.2%CVE-2017-1084—CVE-2017-1084EPSS 15.3%CVE-2025-14558HIGHRemote code execution via ND6 Router AdvertisementsEPSS 6.7%CVE-2019-5600—CVE-2019-5600EPSS 4.9%CVE-2018-17158—CVE-2018-17158EPSS 4.4%CVE-2018-6918—CVE-2018-6918EPSS 4.2%