PatchTheCVEmcrypt vulnerabilities
Recent CVEs affecting mcrypt products. 3 tracked.
mcrypt has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2012-11-21. Highest priority: CVE-2012-4409 (score 53/100).
- CVE-2012-4527 MEDIUM 6.8 UPGRADE Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denia
- CVE-2012-4426 MEDIUM 6.8 UPGRADE Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers
- CVE-2012-4409 MEDIUM 6.8 UPGRADE Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user
FAQ
How do I fix mcrypt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mcrypt being exploited right now?
None of the tracked mcrypt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mcrypt CVE should I patch first?
CVE-2012-4409 currently ranks highest (53/100): Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user.