CVEvulnerability
CVE-2015-8946
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2016-07-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 3.3 LOW — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.
Affected configurations
• canonical ubuntu linux 15.10
• canonical ubuntu linux 16.04
• ecryptfs ecryptfs-utils (<= 110)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.openwall.com/lists/oss-security/2016/07/13/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2016/07/14/3 www.openwall.com
- http://www.ubuntu.com/usn/USN-3032-1 Third Party Advisory
- https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857 bazaar.launchpad.net
- https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 bugs.launchpad.net
- http://www.openwall.com/lists/oss-security/2016/07/13/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2016/07/14/3 www.openwall.com
- http://www.ubuntu.com/usn/USN-3032-1 Third Party Advisory
- https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857 bazaar.launchpad.net
- https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282 bugs.launchpad.net