{"id":"CVE-2023-0751","aliases":["EUVD-2023-12769","GHSA-4j3q-rqjq-x3f3"],"status":"published","title":"GELI silently omits the keyfile if read from stdin","description":"When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00637,"percentile":0.51052,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2023-02-08T19:25:01Z","modified":"2026-06-17T05:26:13Z","products":[{"vendor":"freebsd","product":"freebsd"}],"references":[{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc","tags":["x_transferred","Mitigation","Patch","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230316-0004/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0751"},{"url":"https://security.netapp.com/advisory/ntap-20230316-0004"},{"url":"https://github.com/advisories/GHSA-4j3q-rqjq-x3f3"}],"sources":{"cve":[{"id":"CVE-2023-0751","title":"GELI silently omits the keyfile if read from stdin","description":"When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n","status":"published","published":"2023-02-08T19:25:01.118Z","modified":"2025-03-25T13:47:39.852Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-12769","description":"When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n","status":"published","published":"2023-02-08T19:25:01Z","modified":"2025-03-25T13:47:39Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:53.630669Z"}],"ghsa":[{"id":"GHSA-4j3q-rqjq-x3f3","title":"When GELI reads a key file from standard input, it does not reuse the key file to initialize...","description":"When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.","status":"published","published":"2023-02-08T21:30:20Z","modified":"2025-03-25T15:32:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:00:26.443231Z"}],"nvd":[{"id":"CVE-2023-0751","description":"When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n","status":"published","published":"2023-02-08T20:15:24.377Z","modified":"2026-06-17T05:26:13.91Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:46.811196Z"}]}}