Skip to content
OpenAdvisories

Package · Debian

dislocker

2 known vulnerabilities.

2 results · Feed

  • Medium 6.1

    Dislocker through 0.7.3 Heap Out-of-Bounds Read via BitLocker Metadata Dataset Size

    Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or d…

  • Medium 6.1

    Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK Datum Size Underflow

    Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. Attackers can supply a malicious BitLocker volume image with a datum_size smalle…