CVE-2015-8946 ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local u...
LowCVSS 3.3
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ecryptfs-utils(Debian:12) | < 111-1 | 111-1 |
| debian/ecryptfs-utils(Debian:13) | < 111-1 | 111-1 |
| debian/ecryptfs-utils(Debian:14) | < 111-1 | 111-1 |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| ecryptfs-utils | <= 110 | No fix listed |
References
- Debian Security Tracker CVE-2015-8946 vendor-advisory
- [oss-security] 20160713 CVE Requests: Information exposure caused by ecryptfs-setup-swap failures mailing-list
- [oss-security] 20160714 Re: CVE Requests: Information exposure caused by ecryptfs-setup-swap failures mailing-list
- USN-3032-1 third-party-advisory vendor-advisory
- bazaar.launchpad.net
- bugs.launchpad.net