TI-2012-02939 CVE-2012-3409 · GHSA-xjcq-2h6g-jf3c
Improper input validation in ecryptfs-utils
Priority LOW 34
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
Vulnerabilities
11 records
TI-2016-05334 CVE-2016-6224 · GHSA-q38r-hcf4-gx69
ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from…
Priority LOW 16
ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive informa…
TI-2015-07359 CVE-2015-8946 · GHSA-75gv-98wv-gmx4
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap…
Priority LOW 16
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensi…
TI-2016-01433 CVE-2016-1572 · GHSA-v495-vr49-324q
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem…
Priority LOW 37
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
TI-2014-07876 CVE-2014-9687 · GHSA-mc6q-88m2-653g
eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes…
Priority LOW 27
eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.
TI-2011-01613 CVE-2011-1837 · GHSA-29qx-j9r5-xp78
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils…
Priority LOW 17
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
TI-2011-01612 CVE-2011-1836 · GHSA-5764-q5mh-rcg7
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a…
Priority LOW 21
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations…
TI-2011-01611 CVE-2011-1835 · GHSA-5w9q-2c3w-jmw2
The encrypted private-directory setup process in utils/ecryptfs-setup-private in…
Priority LOW 20
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended acc…
TI-2011-01610 CVE-2011-1834 · GHSA-3786-55ch-9g5p
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the…
Priority LOW 11
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unm…
TI-2011-01608 CVE-2011-1832 · GHSA-fjxf-xqv9-mrff
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check…
Priority LOW 11
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
TI-2011-01607 CVE-2011-1831 · GHSA-3699-7c24-vh7q
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check…
Priority LOW 21
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privil…