CVE-2002-0570

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.

Published: Jul 3, 2002
Updated: Nov 9, 2025
CVE: CVE-2002-0570
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	2.4.15	2.4.15.x
linux / linux_kernel	2.2.10	2.2.10.x
linux / linux_kernel	2.4.11	2.4.11.x
linux / linux_kernel	2.2.13	2.2.13.x
linux / linux_kernel	2.2.0	2.2.0.x
linux / linux_kernel	2.2.6	2.2.6.x
linux / linux_kernel	2.4.12	2.4.12.x
linux / linux_kernel	2.4.13	2.4.13.x
linux / linux_kernel	2.2.18	2.2.18.x
linux / linux_kernel	2.2.3	2.2.3.x
linux / linux_kernel	2.4.17	2.4.17.x
linux / linux_kernel	2.2.2	2.2.2.x
linux / linux_kernel	2.2.5	2.2.5.x
linux / linux_kernel	2.4.7	2.4.7.x
linux / linux_kernel	2.2.8	2.2.8.x
linux / linux_kernel	2.4.9	2.4.9.x
linux / linux_kernel	2.2.7	2.2.7.x
linux / linux_kernel	2.2.16	2.2.16.x
linux / linux_kernel	2.2.1	2.2.1.x
linux / linux_kernel	2.2.12	2.2.12.x
linux / linux_kernel	2.4.10	2.4.10.x
linux / linux_kernel	2.4.0	2.4.0.x
linux / linux_kernel	2.4.2	2.4.2.x
linux / linux_kernel	2.4.16	2.4.16.x
linux / linux_kernel	2.4.8	2.4.8.x
linux / linux_kernel	2.4.14	2.4.14.x
linux / linux_kernel	2.2.19	2.2.19.x
linux / linux_kernel	2.2.20	2.2.20.x
linux / linux_kernel	2.4.5	2.4.5.x
linux / linux_kernel	2.2.15	2.2.15.x
linux / linux_kernel	2.2.4	2.2.4.x
linux / linux_kernel	2.4.3	2.4.3.x
linux / linux_kernel	2.2.14	2.2.14.x
linux / linux_kernel	2.2.11	2.2.11.x
linux / linux_kernel	2.4.1	2.4.1.x
linux / linux_kernel	2.4.4	2.4.4.x
linux / linux_kernel	2.2.17	2.2.17.x
linux / linux_kernel	2.4.6	2.4.6.x
linux / linux_kernel	2.2.9	2.2.9.x

Vulnerability Database

314,343

CVE-2002-0570

Deep Security Visibility Without the Complexity