CVE-2016-1572

Published: 20 January 2016

mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.

Priority

CVSS 3 base score: 8.4

Status

Package	Release	Status
ecryptfs-utils Launchpad, Ubuntu, Debian	Upstream	Released (109)






	Ubuntu 14.04 ESM (Trusty Tahr)	Released (104-0ubuntu1.14.04.4)
	Patches: Upstream: https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1572
https://ubuntu.com/security/notices/USN-2876-1
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/ecryptfs/+bug/1530566

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›