Lucene search

MitreCVE-2016-6224

HistoryJul 22, 2016 - 2:59 p.m.

CVE-2016-6224

2016-07-2214:59:01

CWE-20

mitre

web.nvd.nist.gov

cve-2016-6224

ecryptfs

encryption

swap partition

gpt partitioning

nvme

mmc

incomplete fix

information security

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

Percentile

5.1%

JSON

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946.

Affected configurations

Nvd

Node

ecryptfsecryptfs-utilsRange≤110

Node

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch15.10

VendorProductVersionCPE
ecryptfsecryptfs-utils*cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
canonicalubuntu_linux15.10cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ecryptfs	ecryptfs-utils	*	cpe:2.3:a:ecryptfs:ecryptfs-utils::::::::
canonical	ubuntu_linux	14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04::::lts:::
canonical	ubuntu_linux	15.10	cpe:2.3:o:canonical:ubuntu_linux:15.10:::::::*