Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ecryptfs ecryptfs-utils 64 vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2011-1831
utils/mount.ecryptfs_private.c in ecryptfs-utils prior to 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
Ecryptfs Ecryptfs-utils 66Ecryptfs Ecryptfs-utils 67Ecryptfs Ecryptfs-utils 74Ecryptfs Ecryptfs-utils 75Ecryptfs Ecryptfs-utils 76Ecryptfs Ecryptfs-utils 83Ecryptfs Ecryptfs-utils 84Ecryptfs Ecryptfs Utils 59Ecryptfs Ecryptfs Utils 58Ecryptfs Ecryptfs-utils 62Ecryptfs Ecryptfs-utils 63Ecryptfs Ecryptfs-utils 70Ecryptfs Ecryptfs-utils 71Ecryptfs Ecryptfs-utils 79Ecryptfs Ecryptfs-utils 80Ecryptfs Ecryptfs-utils 87Ecryptfs Ecryptfs-utilsEcryptfs Ecryptfs-utils 68Ecryptfs Ecryptfs-utils 69Ecryptfs Ecryptfs-utils 77Ecryptfs Ecryptfs-utils 78Ecryptfs Ecryptfs-utils 85
4.4
CVSSv2
CVE-2011-1835
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils prior to 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creatio...
Ecryptfs Ecryptfs-utils 64Ecryptfs Ecryptfs-utils 65Ecryptfs Ecryptfs-utils 72Ecryptfs Ecryptfs-utils 73Ecryptfs Ecryptfs-utils 81Ecryptfs Ecryptfs-utils 82Ecryptfs Ecryptfs Utils 61Ecryptfs Ecryptfs Utils 60Ecryptfs Ecryptfs-utils 68Ecryptfs Ecryptfs-utils 69Ecryptfs Ecryptfs-utils 76Ecryptfs Ecryptfs-utils 77Ecryptfs Ecryptfs-utils 78Ecryptfs Ecryptfs-utils 85Ecryptfs Ecryptfs-utils 86Ecryptfs Ecryptfs-utils 66Ecryptfs Ecryptfs-utils 67Ecryptfs Ecryptfs-utils 74Ecryptfs Ecryptfs-utils 75Ecryptfs Ecryptfs-utils 83Ecryptfs Ecryptfs-utils 84Ecryptfs Ecryptfs Utils 59
2.1
CVSSv2
CVE-2011-1832
utils/mount.ecryptfs_private.c in ecryptfs-utils prior to 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
Ecryptfs Ecryptfs-utils 68Ecryptfs Ecryptfs-utils 69Ecryptfs Ecryptfs-utils 76Ecryptfs Ecryptfs-utils 77Ecryptfs Ecryptfs-utils 84Ecryptfs Ecryptfs-utils 85Ecryptfs Ecryptfs-utils 63Ecryptfs Ecryptfs-utils 64Ecryptfs Ecryptfs-utils 72Ecryptfs Ecryptfs-utils 73Ecryptfs Ecryptfs-utils 80Ecryptfs Ecryptfs-utils 81Ecryptfs Ecryptfs-utilsEcryptfs Ecryptfs Utils 61Ecryptfs Ecryptfs Utils 60Ecryptfs Ecryptfs-utils 62Ecryptfs Ecryptfs-utils 70Ecryptfs Ecryptfs-utils 71Ecryptfs Ecryptfs-utils 78Ecryptfs Ecryptfs-utils 79Ecryptfs Ecryptfs-utils 86Ecryptfs Ecryptfs-utils 87
2.1
CVSSv2
CVE-2011-1834
utils/mount.ecryptfs_private.c in ecryptfs-utils prior to 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.
Ecryptfs Ecryptfs-utils 63Ecryptfs Ecryptfs-utils 64Ecryptfs Ecryptfs-utils 71Ecryptfs Ecryptfs-utils 72Ecryptfs Ecryptfs-utils 79Ecryptfs Ecryptfs-utils 80Ecryptfs Ecryptfs-utilsEcryptfs Ecryptfs Utils 61Ecryptfs Ecryptfs-utils 67Ecryptfs Ecryptfs-utils 68Ecryptfs Ecryptfs-utils 75Ecryptfs Ecryptfs-utils 76Ecryptfs Ecryptfs-utils 83Ecryptfs Ecryptfs-utils 84Ecryptfs Ecryptfs Utils 58Ecryptfs Ecryptfs-utils 65Ecryptfs Ecryptfs-utils 66Ecryptfs Ecryptfs-utils 73Ecryptfs Ecryptfs-utils 74Ecryptfs Ecryptfs-utils 81Ecryptfs Ecryptfs-utils 82Ecryptfs Ecryptfs Utils 60
4.6
CVSSv2
CVE-2011-1836
utils/ecryptfs-recover-private in ecryptfs-utils prior to 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
Ecryptfs Ecryptfs-utils 65Ecryptfs Ecryptfs-utils 62Ecryptfs Ecryptfs-utils 70Ecryptfs Ecryptfs-utils 71Ecryptfs Ecryptfs-utils 78Ecryptfs Ecryptfs-utils 79Ecryptfs Ecryptfs-utils 86Ecryptfs Ecryptfs-utils 87Ecryptfs Ecryptfs-utils 66Ecryptfs Ecryptfs-utils 74Ecryptfs Ecryptfs-utils 75Ecryptfs Ecryptfs-utils 82Ecryptfs Ecryptfs-utils 83Ecryptfs Ecryptfs Utils 60Ecryptfs Ecryptfs Utils 59Ecryptfs Ecryptfs Utils 58Ecryptfs Ecryptfs-utils 67Ecryptfs Ecryptfs-utils 68Ecryptfs Ecryptfs-utils 69Ecryptfs Ecryptfs-utils 76Ecryptfs Ecryptfs-utils 77Ecryptfs Ecryptfs-utils 84
3.6
CVSSv2
CVE-2011-1837
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils prior to 90 allows local users to overwrite arbitrary files via unspecified vectors.
Ecryptfs Ecryptfs-utils 63Ecryptfs Ecryptfs-utils 64Ecryptfs Ecryptfs-utils 71Ecryptfs Ecryptfs-utils 72Ecryptfs Ecryptfs-utils 79Ecryptfs Ecryptfs-utils 80Ecryptfs Ecryptfs-utilsEcryptfs Ecryptfs Utils 61Ecryptfs Ecryptfs-utils 67Ecryptfs Ecryptfs-utils 68Ecryptfs Ecryptfs-utils 75Ecryptfs Ecryptfs-utils 76Ecryptfs Ecryptfs-utils 83Ecryptfs Ecryptfs-utils 84Ecryptfs Ecryptfs-utils 85Ecryptfs Ecryptfs Utils 58Ecryptfs Ecryptfs-utils 62Ecryptfs Ecryptfs-utils 69Ecryptfs Ecryptfs-utils 70Ecryptfs Ecryptfs-utils 77Ecryptfs Ecryptfs-utils 78Ecryptfs Ecryptfs-utils 86
3.3
CVSSv2
CVE-2011-1833
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel prior to 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
Linux Linux Kernel 3.0.25Linux Linux Kernel 3.0Linux Linux Kernel 3.0.22Linux Linux Kernel 3.0.5Linux Linux Kernel 3.0.38Linux Linux KernelLinux Linux Kernel 3.0.18Linux Linux Kernel 3.0.6Linux Linux Kernel 3.0.36Linux Linux Kernel 3.0.35Linux Linux Kernel 3.0.11Linux Linux Kernel 3.0.34Linux Linux Kernel 3.0.32Linux Linux Kernel 3.0.19Linux Linux Kernel 3.0.37Linux Linux Kernel 3.0.4Linux Linux Kernel 3.0.27Linux Linux Kernel 3.0.42Linux Linux Kernel 3.0.23Linux Linux Kernel 3.0.8Linux Linux Kernel 3.0.40Linux Linux Kernel 3.0.33
2.1
CVSSv2
CVE-2016-4569
The snd_timer_user_params function in sound/core/timer.c in the Linux kernel up to and including 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface.
Linux Linux KernelCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Novell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0
5
CVSSv2
CVE-2016-4580
The x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel prior to 4.5.5 does not properly initialize a certain data structure, which allows malicious users to obtain sensitive information from kernel stack memory via an X.25 Call Request.
Linux Linux KernelCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04
2.1
CVSSv2
CVE-2016-4482
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel up to and including 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Linux Linux KernelNovell Suse Linux Enterprise Module For Public Cloud 12.0Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Real Time Extension 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Debuginfo 11.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Software Development Kit 12.0Fedoraproject Fedora 24
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook