VIR Vulnerability Intelligence Relay

CVE-2012-4578

low
Published 2012-08-21 · Modified 2026-04-29
CVSS v3
—
CVSS v2
2.1
VIR risk
2.1

Description

The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://lists.freebsd.org/pipermail/freebsd-security/2012-August/006541.html

OS impact
OSVersionStatusFixed in
freebsd freebsd10.0not-affected

Application impact
VendorProductVersionsFixed
pawel_jakub_dawidekgeli{"endIncluding":"7"}
pawel_jakub_dawidekgeli4

References

CWEs

CWE-310

Verify integrity in audit chain (admin only). AS-IS.