PT-2016-6804 · Linux+2 · Ecryptfs+2

Jason Gerard Derose + 1 · Published 2016-07-14 · Updated 2018-02-01 · CVE-2016-6224

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions eCryptfs (affected versions not specified)

Description The issue allows local users to obtain sensitive information via unspecified vectors because ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on an NVMe or MMC drive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6224

SUSE-SU-2018:0336-1

USN-3032-1

Affected Products

Suse

Ubuntu

Ecryptfs

References · 20

• https://cve.org/CVERecord?id=CVE-2016-6224 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-6224 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:0336-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5WWCVHDLRLZTYMXEIONYFHLYAXXLJW3 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6224 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3032-1 · Vendor Advisory
• http://ubuntu.com/usn/USN-3032-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6224 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6224 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3032-1 · Vendor Advisory
• https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 · Note
• https://bugs.launchpad.net/ecryptfs/+bug/1597154 · Note
• https://bugzilla.suse.com/989122 · Note
• http://openwall.com/lists/oss-security/2016/07/14/3 · Note
• https://suse.com/security/cve/CVE-2015-8946 · Note