GCVE - cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ecryptfs (`89cd0da8-4086-542d-a63c-7e19eed12f58`)
Product	Ecryptfs Utils (`083c3219-15e6-5ffc-af4e-8c53c335ccfd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/ecryptfs-utils`	purl2cpe	2026-06-01 10:18:08.935736
`pkg:deb/ubuntu/ecryptfs-utils`	purl2cpe	2026-06-01 10:18:08.935738
`pkg:github/dustinkirkland/ecryptfs-utils`	purl2cpe	2026-06-01 10:18:08.935740
`pkg:rpm/fedora/ecryptfs-utils`	purl2cpe	2026-06-01 10:18:08.935741
`pkg:rpm/opensuse/ecryptfs-utils`	purl2cpe	2026-06-01 10:18:08.935743

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6224`	vulnerable	2026-06-08 05:07:59.227266	Details available ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946. Published: 2016-07-22T14:00:00.000Z Updated: 2024-08-06T01:22:20.776Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/07/14/3 http://www.openwall.com/lists/oss-security/2016/07/13/2 https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 http://www.ubuntu.com/usn/USN-3032-1 https://bugs.launchpad.net/ecryptfs/+bug/1597154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1572`	vulnerable	2026-06-08 05:07:31.795685	Details available mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid. Published: 2016-01-22T15:00:00.000Z Updated: 2024-08-05T23:02:11.774Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2016-01/msg00091.html http://www.securitytracker.com/id/1034791 http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html https://bugs.launchpad.net/ecryptfs/+bug/1530566 http://www.openwall.com/lists/oss-security/2016/01/20/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8946`	vulnerable	2026-06-08 05:07:05.769181	Details available ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors. Published: 2016-07-22T14:00:00.000Z Updated: 2024-08-06T08:36:30.716Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/07/14/3 http://www.openwall.com/lists/oss-security/2016/07/13/2 https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857 https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 http://www.ubuntu.com/usn/USN-3032-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9687`	vulnerable	2026-06-08 05:06:12.446083	Details available eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack. Published: 2015-03-16T14:00:00.000Z Updated: 2024-08-06T13:55:04.224Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html http://www.openwall.com/lists/oss-security/2015/02/28/3 http://www.openwall.com/lists/oss-security/2015/02/17/7 http://www.openwall.com/lists/oss-security/2015/02/10/16 https://bugs.launchpad.net/ecryptfs/+bug/906550	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3409`	vulnerable	2026-06-08 05:02:09.644792	Details available ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation Published: 2019-12-20T13:33:05.000Z Updated: 2024-08-06T20:05:12.386Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2012-3409 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3409 http://www.openwall.com/lists/oss-security/2012/07/12/1 http://www.openwall.com/lists/oss-security/2012/07/11/23 http://www.openwall.com/lists/oss-security/2012/07/13/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1837`	vulnerable	2026-06-08 04:58:02.327731	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1836`	vulnerable	2026-06-08 04:58:02.326724	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1835`	vulnerable	2026-06-08 04:58:02.325767	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1834`	vulnerable	2026-06-08 04:58:02.324772	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1832`	vulnerable	2026-06-08 04:58:02.291521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1831`	vulnerable	2026-06-08 04:58:02.273853	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.