CVE-2021-4122

MediumCVSS 4.3/10Last modified Oct 14, 2026

Description

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-345

Affected software

VendorProductVersions
n/acryptsetupFixed in cryptsetup 2.4.3, cryptsetup 2.3.7
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Aug 24, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-412207.8TensorFlow is an open source platform for machine learning. In affected versions the async implementation of `CollectiveReduceV2` suffers frCVE-2021-412217.8TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for the `Cudnn*` operations in TenCVE-2021-412225.5TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SplitV` can trigger a segfault is anCVE-2021-412237.1TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerablCVE-2021-412247.1TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to CVE-2021-412257.8TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized vaCVE-2021-412267.1TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a hCVE-2021-412275.5TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be trickedCVE-2021-412287.8TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's `saved_model_cli` tool is vulnerable to a codeCVE-2021-412296.5BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory whCVE-2021-41236.5livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-412308.8Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after initial login are no
CVE-2021-4122: Medium severity, CVSS 4.3 | Vulnix