Ecryptfs

11 CVEs across 2 Ecryptfs products. Browse Ecryptfs vulnerabilities, severities, and proof-of-concept exploits.

Ecryptfs products with known CVEs

ProductCVEs
Ecryptfs-Utils11
Ecryptfs Utils7
Ecryptfs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2012-3409High7.82019-12-20ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
CVE-2016-6224Low3.32016-07-22ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MM…
CVE-2015-8946Low3.32016-07-22ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain…
CVE-2016-1572High8.42016-01-22mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a…
CVE-2014-96872015-03-16eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force at…
CVE-2011-18372014-02-15The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified v…
CVE-2011-18362014-02-15utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass int…
CVE-2011-18352014-02-15The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is…
CVE-2011-18342014-02-15utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause…
CVE-2011-18322014-02-15utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a…
CVE-2011-18312014-02-15utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any…
CVE-2008-51882008-11-21The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs plac…