CVE-2016-1572 mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated....
HighCVSS 8.4
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ecryptfs-utils(Debian:12) | < 106-2 | 106-2 |
| debian/ecryptfs-utils(Debian:13) | < 106-2 | 106-2 |
| debian/ecryptfs-utils(Debian:14) | < 106-2 | 106-2 |
| ecryptfs-utils | < 109 | 109 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
References
- Debian Security Tracker CVE-2016-1572 vendor-advisory
- FEDORA-2016-b02ad4e424 mailing-list third-party-advisory vendor-advisory
- FEDORA-2016-7b9a2fe987 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0239 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0291 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0302 mailing-list third-party-advisory vendor-advisory
- DSA-3450 patch third-party-advisory vendor-advisory
- [oss-security] 20160120 Security issue in eCryptfs-utils (CVE-2016-1572) mailing-list third-party-advisory
- 1034791 broken-link third-party-advisory vdb-entry
- USN-2876-1 patch third-party-advisory vendor-advisory
- bazaar.launchpad.net patch third-party-advisory
- bugs.launchpad.net issue-tracking patch third-party-advisory