mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ecryptfs-utils | Feb 2, 2016 | Jan 20, 2016 |
| Suse | — | Upgrade ecryptfs-utilsUpgrade ecryptfs-utils-develUpgrade ecryptfs-utils-32bitUpgrade libecryptfs1Upgrade ecryptfs-utils-x86 | Feb 2, 2016 | Jan 22, 2016 |
| Ubuntu | — | Upgrade ecryptfs-utils | Feb 2, 2016 | Jan 20, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub