Ecryptfs Ecryptfs-Utils
11 CVEs affecting Ecryptfs Ecryptfs-Utils. Latest disclosed: 2019-12-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1572 | High | 8.4 | 2016-01-22 | mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a… |
CVE-2012-3409 | High | 7.8 | 2019-12-20 | ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation |
CVE-2016-6224 | Low | 3.3 | 2016-07-22 | ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MM… |
CVE-2015-8946 | Low | 3.3 | 2016-07-22 | ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain… |
CVE-2014-9687 | | 2015-03-16 | eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force at… | |
CVE-2011-1837 | | 2014-02-15 | The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified v… | |
CVE-2011-1836 | | 2014-02-15 | utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass int… | |
CVE-2011-1835 | | 2014-02-15 | The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is… | |
CVE-2011-1834 | | 2014-02-15 | utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause… | |
CVE-2011-1832 | | 2014-02-15 | utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a… | |
CVE-2011-1831 | | 2014-02-15 | utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any… |