Summary
Jann Horn discovered that mount.ecryptfs_private would mount over certain
directories in the proc filesystem. A local attacker could use this to escalate
their privileges. (CVE-2016-1572)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ecryptfs-utils | 104-0ubuntu1.14.04.4 |
Vulnerabilities 1
-
Unscored —
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local use…
References
-
report
https://ubuntu.com/security/CVE-2016-1572