CVE-2015-8946

概要

参考情報

• openwall.com/lists/oss-security/2016/07/13/2
• openwall.com/lists/oss-security/2016/07/14/3
• ubuntu.com/usn/USN-3032-1 · Third Party Advisory
• bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857
• bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282

ecryptfs-utils のその他の脆弱性

• CVE-2012-3409高 7.8ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
• CVE-2016-6224低 3.3ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a…
• CVE-2016-1572高 8.4mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges…
• CVE-2014-9687中 5.0eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords v…
• CVE-2011-1837低 3.6The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary file…