utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check…
Priority LOW 21CWE-264Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.
Summary
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
Why it matters now
EPSS 0.00366 30th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 31
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:* | up to 89 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:62:*:*:*:*:*:*:* | 62 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:63:*:*:*:*:*:*:* | 63 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:64:*:*:*:*:*:*:* | 64 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:65:*:*:*:*:*:*:* | 65 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:66:*:*:*:*:*:*:* | 66 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:67:*:*:*:*:*:*:* | 67 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:68:*:*:*:*:*:*:* | 68 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:69:*:*:*:*:*:*:* | 69 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:70:*:*:*:*:*:*:* | 70 | Vulnerable | Ecryptfs |
- cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:* Versions up to 89 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:62:*:*:*:*:*:*:* Versions 62 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:63:*:*:*:*:*:*:* Versions 63 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:64:*:*:*:*:*:*:* Versions 64 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:65:*:*:*:*:*:*:* Versions 65 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:66:*:*:*:*:*:*:* Versions 66 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:67:*:*:*:*:*:*:* Versions 67 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:68:*:*:*:*:*:*:* Versions 68 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:69:*:*:*:*:*:*:* Versions 69 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:70:*:*:*:*:*:*:* Versions 70 Vulnerable ·Ecryptfs
Show 21 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ecryptfs:ecryptfs-utils:71:*:*:*:*:*:*:* | 71 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:72:*:*:*:*:*:*:* | 72 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:73:*:*:*:*:*:*:* | 73 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:74:*:*:*:*:*:*:* | 74 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:75:*:*:*:*:*:*:* | 75 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:76:*:*:*:*:*:*:* | 76 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:77:*:*:*:*:*:*:* | 77 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:78:*:*:*:*:*:*:* | 78 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:79:*:*:*:*:*:*:* | 79 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:80:*:*:*:*:*:*:* | 80 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:81:*:*:*:*:*:*:* | 81 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:82:*:*:*:*:*:*:* | 82 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:83:*:*:*:*:*:*:* | 83 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:84:*:*:*:*:*:*:* | 84 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:85:*:*:*:*:*:*:* | 85 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:86:*:*:*:*:*:*:* | 86 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs-utils:87:*:*:*:*:*:*:* | 87 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs_utils:58:*:*:*:*:*:*:* | 58 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs_utils:59:*:*:*:*:*:*:* | 59 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs_utils:60:*:*:*:*:*:*:* | 60 | Vulnerable | Ecryptfs |
| cpe:2.3:a:ecryptfs:ecryptfs_utils:61:*:*:*:*:*:*:* | 61 | Vulnerable | Ecryptfs |
- cpe:2.3:a:ecryptfs:ecryptfs-utils:71:*:*:*:*:*:*:* Versions 71 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:72:*:*:*:*:*:*:* Versions 72 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:73:*:*:*:*:*:*:* Versions 73 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:74:*:*:*:*:*:*:* Versions 74 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:75:*:*:*:*:*:*:* Versions 75 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:76:*:*:*:*:*:*:* Versions 76 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:77:*:*:*:*:*:*:* Versions 77 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:78:*:*:*:*:*:*:* Versions 78 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:79:*:*:*:*:*:*:* Versions 79 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:80:*:*:*:*:*:*:* Versions 80 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:81:*:*:*:*:*:*:* Versions 81 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:82:*:*:*:*:*:*:* Versions 82 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:83:*:*:*:*:*:*:* Versions 83 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:84:*:*:*:*:*:*:* Versions 84 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:85:*:*:*:*:*:*:* Versions 85 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:86:*:*:*:*:*:*:* Versions 86 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs-utils:87:*:*:*:*:*:*:* Versions 87 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs_utils:58:*:*:*:*:*:*:* Versions 58 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs_utils:59:*:*:*:*:*:*:* Versions 59 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs_utils:60:*:*:*:*:*:*:* Versions 60 Vulnerable ·Ecryptfs
- cpe:2.3:a:ecryptfs:ecryptfs_utils:61:*:*:*:*:*:*:* Versions 61 Vulnerable ·Ecryptfs
Remediation
Red Hat 1 advisory
- RHSA-2011:1241 Released 2011-08-31 · Red Hat rating Moderateecryptfs-utils security update
- RHEL Desktop Workstation (v. 5 client) ecryptfs-utils-75-5.el5_7.2, ecryptfs-utils-devel-75-5.el5_7.2, ecryptfs-utils-devel-75-5.el5_7.2.i386
- Red Hat Enterprise Linux (v. 5 server) ecryptfs-utils-75-5.el5_7.2, ecryptfs-utils-75-5.el5_7.2.i386, ecryptfs-utils-75-5.el5_7.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) ecryptfs-utils-75-5.el5_7.2, ecryptfs-utils-75-5.el5_7.2.i386, ecryptfs-utils-gui-75-5.el5_7.2 +1
- Red Hat Enterprise Linux Server (v. 6) ecryptfs-utils-82-6.el6_1.3, ecryptfs-utils-82-6.el6_1.3.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) ecryptfs-utils-82-6.el6_1.3, ecryptfs-utils-devel-82-6.el6_1.3, ecryptfs-utils-devel-82-6.el6_1.3.ppc +1
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| RHEL Desktop Workstation (v. 5 client) | Fixed | RHSA-2011:1241 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2011:1241 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2011:1241 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2011:1241 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2011:1241 |
Timeline
- 2026-10-02 Threatist record created from CVE-2011-1831
- 2026-10-03 Alias added: GHSA-3699-7c24-vh7q
References
More Ecryptfs-utils vulnerabilities
- TI-2016-01433 mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem… CVSS 3.1HIGH 8.4
- TI-2012-02939 Improper input validation in ecryptfs-utils CVSS 3.1HIGH 7.8
- TI-2014-07876 eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes… CVSS 2.0MEDIUM 5.0
- TI-2011-01612 utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a… CVSS 2.0MEDIUM 4.6
- TI-2011-01611 The encrypted private-directory setup process in utils/ecryptfs-setup-private in… CVSS 2.0MEDIUM 4.4
- TI-2011-01613 The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils… CVSS 2.0LOW 3.6
Sources
- CVE-2011-1831 · CVE Program
- CVE-2011-1831 · NVD
- FIRST EPSS
- GHSA-3699-7c24-vh7q · GitHub Advisory Database · CC BY 4.0
- CVE-2011-1831 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences