CVE-2014-3462 in EncFS

Summary

The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 05/14/2014
• Disclosure: 08/07/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-104924
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 6.9
• EPSS: 0.01089
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3462
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3462
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3462/