CVE-2006-3123: Matt Blaze Cryptographic File System

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.

Affected products

• Matt Blaze Cryptographic File System: version 1.4.1 only

Published 2006-08-07. Last modified 2026-06-16.