https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:08:31 +0000 https://vulnerability.circl.lu/vuln/cve-2021-4122 <p><strong>Affected:</strong> cryptsetup</p> <p>It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.</p> <p><strong>Affected:</strong> cryptsetup</p> <p>It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.</p> https://vulnerability.circl.lu/vuln/cve-2021-4122 https://vulnerability.circl.lu/vuln/usn-5286-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: cryptsetup</p> <p>Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may trigger the device to be unencrypted the next time it is mounted by the user.</p> <p>On Ubuntu 20.04 LTS, this issue was fixed by disabling the online reencryption feature.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: cryptsetup</p> <p>Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may trigger the device to be unencrypted the next time it is mounted by the user.</p> <p>On Ubuntu 20.04 LTS, this issue was fixed by disabling the online reencryption feature.</p> https://vulnerability.circl.lu/vuln/usn-5286-1