GCVE - cpe:2.3:a:arg0:encfs:1.4.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:arg0:encfs:1.4.1:*:*:*:*:*:*:*

part: a version: 1.4.1 update: *

Vendor	Arg0 (`6df5bacf-8f97-5a85-a7fa-9f25ef9d955e`)
Product	Encfs (`bf95c178-645b-51a2-a947-e96e43d48479`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/encfs`	purl2cpe	2026-06-01 10:16:22.226352
`pkg:deb/ubuntu/encfs`	purl2cpe	2026-06-01 10:16:22.226353
`pkg:github/tarruda/encfs`	purl2cpe	2026-06-01 10:16:22.226355
`pkg:github/vgough/encfs`	purl2cpe	2026-06-01 10:16:22.226356
`pkg:rpm/fedora/fuse-encfs`	purl2cpe	2026-06-01 10:16:22.226357
`pkg:rpm/opensuse/encfs`	purl2cpe	2026-06-01 10:16:22.226359

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3075`	vulnerable	2026-06-08 04:55:12.511131	Details available EncFS before 1.7.0 encrypts multiple blocks by means of the CFB cipher mode with the same initialization vector, which makes it easier for local users to obtain sensitive information via calculations involving recovery of XORed data, as demonstrated by an attack on encrypted data in which the last block contains only one byte. Published: 2010-09-17T17:46:00.000Z Updated: 2024-08-07T02:55:46.802Z Open on db.gcve.eu Reference links http://secunia.com/advisories/41158 https://bugzilla.redhat.com/show_bug.cgi?id=630460 http://secunia.com/advisories/41478 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047825.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3074`	vulnerable	2026-06-08 04:55:12.510602	Details available SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack. Published: 2010-09-17T17:46:00.000Z Updated: 2024-08-07T02:55:46.713Z Open on db.gcve.eu Reference links http://secunia.com/advisories/41158 https://bugzilla.redhat.com/show_bug.cgi?id=630460 http://secunia.com/advisories/41478 http://code.google.com/p/encfs/source/detail?r=59 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3073`	vulnerable	2026-06-08 04:55:12.508224	Details available SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handle integer data sizes when constructing headers intended for randomization of initialization vectors, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms. Published: 2010-09-17T17:46:00.000Z Updated: 2024-08-07T02:55:46.638Z Open on db.gcve.eu Reference links http://secunia.com/advisories/41158 https://bugzilla.redhat.com/show_bug.cgi?id=630460 http://secunia.com/advisories/41478 http://code.google.com/p/encfs/source/detail?r=59 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/047794.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.