PT-2016-6804 · Linux+2 · Ecryptfs+2

Jason Gerard Derose + 1 · Publicado 2016-07-14 · Atualizado 2018-02-01 · CVE-2016-6224

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions eCryptfs (affected versions not specified)

Description The issue allows local users to obtain sensitive information via unspecified vectors because ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on an NVMe or MMC drive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-6224

SUSE-SU-2018:0336-1

USN-3032-1

Produtos afetados

Suse

Ubuntu

Ecryptfs

Referências · 20

• https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 · Nota
• https://bugs.launchpad.net/ecryptfs/+bug/1597154 · Nota
• https://cve.org/CVERecord?id=CVE-2016-6224 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2016-6224 · Nota de Segurança
• https://bugzilla.suse.com/989122 · Nota
• http://openwall.com/lists/oss-security/2016/07/14/3 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:0336-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2015-8946 · Nota
• https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/882 · Nota
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5WWCVHDLRLZTYMXEIONYFHLYAXXLJW3 · Aviso do Fabricante
• https://bugzilla.suse.com/989121 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6224 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-3032-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-6224 · Nota
• http://ubuntu.com/usn/USN-3032-1 · Aviso do Fabricante