Summary
Sylvain Pelissier discovered that eCryptfs did not generate a random salt when
encrypting the mount passphrase with the login password. An attacker could use
this issue to discover the login password used to protect the mount passphrase
and gain unintended access to the encrypted files.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ecryptfs-utils | 104-0ubuntu1.14.04.3 |
Vulnerabilities 1
-
Unscored —
eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to ob…
References
-
report
https://ubuntu.com/security/CVE-2014-9687