Vulnerabilities (CVE)

Filtered by vendor Ecryptfs Subscribe
Filtered by product Ecryptfs-utils
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-3409 2 Debian, Ecryptfs 2 Debian Linux, Ecryptfs-utils 2020-01-03 4.6 MEDIUM 7.8 HIGH
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
CVE-2016-1572 4 Canonical, Debian, Ecryptfs and 1 more 4 Ubuntu Linux, Debian Linux, Ecryptfs-utils and 1 more 2018-10-30 4.6 MEDIUM 8.4 HIGH
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.