Buffer Overflow Vulnerability in Veracrypt by IDRIX
CVE-2019-1010208

3.3LOW

Key Information:

Vendor

Idrix, Truecrypt

Status
Veracrypt, Truecrypt
Vendor
CVE Published:
23 July 2019

What is CVE-2019-1010208?

A buffer overflow vulnerability exists in Veracrypt's NT Driver (veracrypt.sys), allowing locally executed code to exploit an IOCTL request. This could potentially lead to minor information disclosure of the kernel stack, posing security risks. Users are advised to update to version 1.23-Hotfix-1 to mitigate these vulnerabilities. For more information, refer to the official commit on GitHub.

Affected Version(s)

Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) [fixed: 1.23-Hotfix-1]

References

https://github.com/veracrypt/VeraCrypt/commit/f30f9339c9a...
x_refsource_MISC

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.