CVE-2016-1572

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2016-February/177359.html · Mailing List
• lists.fedoraproject.org/pipermail/package-announce/2016-February/177396.html · Mailing List
• lists.opensuse.org/opensuse-updates/2016-01/msg00091.html · Mailing List
• lists.opensuse.org/opensuse-updates/2016-01/msg00118.html · Mailing List
• lists.opensuse.org/opensuse-updates/2016-02/msg00004.html · Mailing List
• debian.org/security/2016/dsa-3450 · Patch
• openwall.com/lists/oss-security/2016/01/20/6 · Mailing List
• securitytracker.com/id/1034791 · Broken Link
• ubuntu.com/usn/USN-2876-1 · Patch
• bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870 · Patch
• bugs.launchpad.net/ecryptfs/+bug/1530566 · Issue Tracking

ecryptfs-utils のその他の脆弱性

• CVE-2012-3409高 7.8ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
• CVE-2016-6224低 3.3ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a…
• CVE-2015-8946低 3.3ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partit…
• CVE-2014-9687中 5.0eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords v…
• CVE-2011-1837低 3.6The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary file…