VDB
CVE-2010-3073
CVE-2010-3073
PUBLISHED
CVSS 2.0999999046325684 LOW
SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
EPSS 0.16% · 36.6th percentile
Risk Scores
CVSS 2.0
2.0999999046325684
EPSS Score
0.16%
36.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| arg0 | encfs | 0, 1.4.0, 1.4.1 |
Timeline
- Sep 17, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- 41158 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=630460 url
- 41478 third-party-advisory
- http://code.google.com/p/encfs/source/detail?r=59 url
- FEDORA-2010-14268 vendor-advisory
- FEDORA-2010-14200 vendor-advisory
- SUSE-SR:2010:023 vendor-advisory
- 20100826 Multiple Vulnerabilities in EncFS mailing-list
- [oss-security] 20100905 CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS mailing-list
- [oss-security] 20100907 Re: CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS mailing-list
- [oss-security] 20100905 Re: CVE Request -- EncFS / fuse-encfs [three ids] -- Multiple Vulnerabilities in EncFS mailing-list
- ADV-2010-2414 vdb
- FEDORA-2010-14254 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2010-3073 advisory