CVE-2016-1572

8.4 HIGH

Published: January 22, 2016 Modified: May 06, 2026

Description

mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177359.html

Source: security@ubuntu.com

Mailing List Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177396.html

Source: security@ubuntu.com

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-01/msg00091.html

Source: security@ubuntu.com

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html

Source: security@ubuntu.com

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-02/msg00004.html

Source: security@ubuntu.com

Mailing List Third Party Advisory

http://www.debian.org/security/2016/dsa-3450

Source: security@ubuntu.com

Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/20/6

Source: security@ubuntu.com

Mailing List Third Party Advisory

http://www.securitytracker.com/id/1034791

Source: security@ubuntu.com

Broken Link Third Party Advisory VDB Entry

http://www.ubuntu.com/usn/USN-2876-1

Source: security@ubuntu.com

Patch Third Party Advisory

https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870

Source: security@ubuntu.com

Patch Third Party Advisory

https://bugs.launchpad.net/ecryptfs/+bug/1530566

Source: security@ubuntu.com

Issue Tracking Patch Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177359.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177396.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-01/msg00091.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-02/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://www.debian.org/security/2016/dsa-3450

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/20/6

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List Third Party Advisory

http://www.securitytracker.com/id/1034791

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link Third Party Advisory VDB Entry

http://www.ubuntu.com/usn/USN-2876-1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Third Party Advisory

https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Third Party Advisory

https://bugs.launchpad.net/ecryptfs/+bug/1530566

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking Patch Third Party Advisory

22 reference(s) from NVD

Quick Stats

CVSS v3 Score

8.4 / 10.0

EPSS (Exploit Probability)

0.0%

14th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-269

Affected Vendors

opensuse debian fedoraproject ecryptfs canonical

Related CVEs