CVE-2010-3073

SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization…

published September 17, 2010

CVSS
—
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Published
2010-09-17T17:46Z
EPSS history
Timeline
  • 17 SEP 17:46Z
    SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization…
    cvelistv5