CVE-2012-4578

Name of the Vulnerable Software and Affected Versions geli encryption provider versions prior to r239184 on FreeBSD 10

Description The issue concerns a weak Master Key used by the geli encryption provider, making it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack.

Recommendations For geli encryption provider versions prior to r239184 on FreeBSD 10, update to a version after r239184 to strengthen the Master Key and prevent brute-force attacks.