CVE-2023-0751 - Vulnerability Details

Vendors	Products
Freebsd	Freebsd

Link	Providers
https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc
https://security.netapp.com/advisory/ntap-20230316-0004/

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
References		https://security.netapp.com/advisory/ntap-20230316-0004/

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-0751", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "state": "PUBLISHED", "assignerShortName": "freebsd", "dateReserved": "2023-02-08T15:34:03.264Z", "datePublished": "2023-02-08T19:25:01.118Z", "dateUpdated": "2025-03-25T13:47:39.852Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["geli"], "product": "FreeBSD", "vendor": "FreeBSD", "versions": [{"lessThan": "13.1-RELEASE-p6", "status": "affected", "version": "13.1-RELEASE", "versionType": "release"}, {"lessThan": "12.4-RELEASE-p1", "status": "affected", "version": "12.4-RELEASE", "versionType": "release"}, {"lessThan": "12.3-RELEASE-p11", "status": "affected", "version": "12.3-RELEASE", "versionType": "release"}]}], "datePublic": "2023-02-09T02:30:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.<br>"}], "value": "When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2023-02-08T19:25:01.118Z"}, "references": [{"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc"}], "source": {"advisory": "FreeBSD-SA-23:01.geli", "discovery": "UNKNOWN"}, "title": "GELI silently omits the keyfile if read from stdin", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.netapp.com/advisory/ntap-20230316-0004/"}, {"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:24:34.119Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-03-25T13:47:13.758738Z", "id": "CVE-2023-0751", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-25T13:47:39.852Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-0751 (string)

assignerOrgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

state : PUBLISHED (string)

assignerShortName : freebsd (string)

dateReserved : 2023-02-08T15:34:03.264Z (string)

datePublished : 2023-02-08T19:25:01.118Z (string)

dateUpdated : 2025-03-25T13:47:39.852Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

modules : [ »

0 : geli (string)

]

product : FreeBSD (string)

vendor : FreeBSD (string)

versions : [ »

0 : { »

lessThan : 13.1-RELEASE-p6 (string)

status : affected (string)

version : 13.1-RELEASE (string)

versionType : release (string)

}

1 : { »

lessThan : 12.4-RELEASE-p1 (string)

status : affected (string)

version : 12.4-RELEASE (string)

versionType : release (string)

}

2 : { »

lessThan : 12.3-RELEASE-p11 (string)

status : affected (string)

version : 12.3-RELEASE (string)

versionType : release (string)

}

]

}

]

datePublic : 2023-02-09T02:30:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.<br> (string)

}

]

value : When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-20 (string)

description : CWE-20 Improper Input Validation (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

shortName : freebsd (string)

dateUpdated : 2023-02-08T19:25:01.118Z (string)

}

references : [ »

0 : { »

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc (string)

}

]

source : { »

advisory : FreeBSD-SA-23:01.geli (string)

discovery : UNKNOWN (string)

}

title : GELI silently omits the keyfile if read from stdin (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.netapp.com/advisory/ntap-20230316-0004/ (string)

}

1 : { »

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:24:34.119Z (string)

}

1 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-25T13:47:13.758738Z (string)

id : CVE-2023-0751 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-25T13:47:39.852Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.netapp.com/advisory/ntap-20230316-0004/"}, {"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:24:34.119Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-0751", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-25T13:47:13.758738Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-25T13:47:36.056Z"}}], "cna": {"title": "GELI silently omits the keyfile if read from stdin", "source": {"advisory": "FreeBSD-SA-23:01.geli", "discovery": "UNKNOWN"}, "affected": [{"vendor": "FreeBSD", "modules": ["geli"], "product": "FreeBSD", "versions": [{"status": "affected", "version": "13.1-RELEASE", "lessThan": "13.1-RELEASE-p6", "versionType": "release"}, {"status": "affected", "version": "12.4-RELEASE", "lessThan": "12.4-RELEASE-p1", "versionType": "release"}, {"status": "affected", "version": "12.3-RELEASE", "lessThan": "12.3-RELEASE-p11", "versionType": "release"}], "defaultStatus": "unaffected"}], "datePublic": "2023-02-09T02:30:00.000Z", "references": [{"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n", "supportingMedia": [{"type": "text/html", "value": "When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd", "dateUpdated": "2023-02-08T19:25:01.118Z"}}}, "cveMetadata": {"cveId": "CVE-2023-0751", "state": "PUBLISHED", "dateUpdated": "2025-03-25T13:47:39.852Z", "dateReserved": "2023-02-08T15:34:03.264Z", "assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "datePublished": "2023-02-08T19:25:01.118Z", "assignerShortName": "freebsd"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.netapp.com/advisory/ntap-20230316-0004/ (string)

}

1 : { »

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T05:24:34.119Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-0751 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-25T13:47:13.758738Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-25T13:47:36.056Z (string)

}

]

cna : { »

title : GELI silently omits the keyfile if read from stdin (string)

source : { »

advisory : FreeBSD-SA-23:01.geli (string)

discovery : UNKNOWN (string)

}

affected : [ »

0 : { »

vendor : FreeBSD (string)

modules : [ »

0 : geli (string)

]

product : FreeBSD (string)

versions : [ »

0 : { »

status : affected (string)

version : 13.1-RELEASE (string)

lessThan : 13.1-RELEASE-p6 (string)

versionType : release (string)

}

1 : { »

status : affected (string)

version : 12.4-RELEASE (string)

lessThan : 12.4-RELEASE-p1 (string)

versionType : release (string)

}

2 : { »

status : affected (string)

version : 12.3-RELEASE (string)

lessThan : 12.3-RELEASE-p11 (string)

versionType : release (string)

}

]

defaultStatus : unaffected (string)

}

]

datePublic : 2023-02-09T02:30:00.000Z (string)

references : [ »

0 : { »

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.<br> (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-20 (string)

description : CWE-20 Improper Input Validation (string)

}

]

}

]

providerMetadata : { »

orgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

shortName : freebsd (string)

dateUpdated : 2023-02-08T19:25:01.118Z (string)

}

cveMetadata : { »

cveId : CVE-2023-0751 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-25T13:47:39.852Z (string)

dateReserved : 2023-02-08T15:34:03.264Z (string)

assignerOrgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

datePublished : 2023-02-08T19:25:01.118Z (string)

assignerShortName : freebsd (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:12.3:-:*:*:*:*:*:*", "matchCriteriaId": "224B7627-CDDE-429A-852F-8A6066B501B7", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.3:p1:*:*:*:*:*:*", "matchCriteriaId": "3B6DCD8A-331E-419F-9253-C4D35C1DF54B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.3:p2:*:*:*:*:*:*", "matchCriteriaId": "4578E06C-16C6-435E-9E51-91CB02602355", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.3:p3:*:*:*:*:*:*", "matchCriteriaId": "71FA1F6C-7E53-40F8-B9E1-5FD28D5DAADA", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.3:p4:*:*:*:*:*:*", "matchCriteriaId": "0EC87BCE-17F0-479B-84DC-516C24FBD396", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.3:p5:*:*:*:*:*:*", "matchCriteriaId": "620C23ED-400C-438C-8427-94437F12EDAF", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:*", "matchCriteriaId": "24920B4D-96C0-401F-B679-BEB086760EAF", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:*", "matchCriteriaId": "BA821886-B26B-47A6-ABC9-B8F70CE0ACFB", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:*", "matchCriteriaId": "220629AD-32CC-4303-86AE-1DD27F0E4C65", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:-:*:*:*:*:*:*", "matchCriteriaId": "DEEE6D52-27E4-438D-AE8D-7141320B5973", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:b1-p1:*:*:*:*:*:*", "matchCriteriaId": "66364EA4-83B1-4597-8C18-D5633B361A9C", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:b2-p2:*:*:*:*:*:*", "matchCriteriaId": "EF9292DD-EFB1-4B50-A941-7485D901489F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:p1:*:*:*:*:*:*", "matchCriteriaId": "EFB18F55-4F5C-4166-9A7E-6F6617179A90", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:p2:*:*:*:*:*:*", "matchCriteriaId": "66E1C269-841F-489A-9A0A-5D145B417E0A", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:p3:*:*:*:*:*:*", "matchCriteriaId": "ECF1B567-F764-45F5-A793-BEA93720F952", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:p4:*:*:*:*:*:*", "matchCriteriaId": "DAFE3F33-2C57-4B52-B658-82572607BD8C", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:p5:*:*:*:*:*:*", "matchCriteriaId": "C925DF75-2785-44BD-91CA-66D29C296689", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:13.1:rc1-p1:*:*:*:*:*:*", "matchCriteriaId": "B536EE52-ED49-4A85-BC9D-A27828D5A961", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n"}], "id": "CVE-2023-0751", "lastModified": "2025-03-25T14:15:20.480", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-02-08T20:15:24.377", "references": [{"source": "secteam@freebsd.org", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20230316-0004/"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "secteam@freebsd.org", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.3:-:*:*:*:*:*:* (string)

matchCriteriaId : 224B7627-CDDE-429A-852F-8A6066B501B7 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.3:p1:*:*:*:*:*:* (string)

matchCriteriaId : 3B6DCD8A-331E-419F-9253-C4D35C1DF54B (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.3:p2:*:*:*:*:*:* (string)

matchCriteriaId : 4578E06C-16C6-435E-9E51-91CB02602355 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.3:p3:*:*:*:*:*:* (string)

matchCriteriaId : 71FA1F6C-7E53-40F8-B9E1-5FD28D5DAADA (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.3:p4:*:*:*:*:*:* (string)

matchCriteriaId : 0EC87BCE-17F0-479B-84DC-516C24FBD396 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.3:p5:*:*:*:*:*:* (string)

matchCriteriaId : 620C23ED-400C-438C-8427-94437F12EDAF (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:-:*:*:*:*:*:* (string)

matchCriteriaId : 24920B4D-96C0-401F-B679-BEB086760EAF (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:rc2-p1:*:*:*:*:*:* (string)

matchCriteriaId : BA821886-B26B-47A6-ABC9-B8F70CE0ACFB (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.4:rc2-p2:*:*:*:*:*:* (string)

matchCriteriaId : 220629AD-32CC-4303-86AE-1DD27F0E4C65 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:-:*:*:*:*:*:* (string)

matchCriteriaId : DEEE6D52-27E4-438D-AE8D-7141320B5973 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:b1-p1:*:*:*:*:*:* (string)

matchCriteriaId : 66364EA4-83B1-4597-8C18-D5633B361A9C (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:b2-p2:*:*:*:*:*:* (string)

matchCriteriaId : EF9292DD-EFB1-4B50-A941-7485D901489F (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:p1:*:*:*:*:*:* (string)

matchCriteriaId : EFB18F55-4F5C-4166-9A7E-6F6617179A90 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:p2:*:*:*:*:*:* (string)

matchCriteriaId : 66E1C269-841F-489A-9A0A-5D145B417E0A (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:p3:*:*:*:*:*:* (string)

matchCriteriaId : ECF1B567-F764-45F5-A793-BEA93720F952 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:p4:*:*:*:*:*:* (string)

matchCriteriaId : DAFE3F33-2C57-4B52-B658-82572607BD8C (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:p5:*:*:*:*:*:* (string)

matchCriteriaId : C925DF75-2785-44BD-91CA-66D29C296689 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:freebsd:freebsd:13.1:rc1-p1:*:*:*:*:*:* (string)

matchCriteriaId : B536EE52-ED49-4A85-BC9D-A27828D5A961 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key. (string)

}

]

id : CVE-2023-0751 (string)

lastModified : 2025-03-25T14:15:20.480 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2023-02-08T20:15:24.377 (string)

references : [ »

0 : { »

source : secteam@freebsd.org (string)

tags : [ »

0 : Mitigation (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://security.netapp.com/advisory/ntap-20230316-0004/ (string)

}

]

sourceIdentifier : secteam@freebsd.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : secteam@freebsd.org (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object