NetSight
IP …
high8.4

CVE-2016-1572

mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a…

Impact

mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.

Affected products

VendorProductAffected versions
EcryptfsEcryptfs-Utils
before 109
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04, 15.10
OpensuseLeap
Version 42.1
OpensuseOpensuse
Versions 13.1, 13.2
DebianDebian Linux
Versions 7.0, 8.0
FedoraprojectFedora
Versions 22, 23

Weakness classification

CWE-269

References