CVE-2016-6224

概要

参考情報

• openwall.com/lists/oss-security/2016/07/13/2
• openwall.com/lists/oss-security/2016/07/14/3
• ubuntu.com/usn/USN-3032-1 · Third Party Advisory
• bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/882
• bugs.launchpad.net/ecryptfs/+bug/1597154
• bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5WWCVHDLRLZTYMXEIONYFHLYAXXLJW3

ecryptfs-utils のその他の脆弱性

• CVE-2012-3409高 7.8ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
• CVE-2015-8946低 3.3ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partit…
• CVE-2016-1572高 8.4mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges…
• CVE-2014-9687中 5.0eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords v…
• CVE-2011-1837低 3.6The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary file…