CVE

Id
93044  
CVE No.
CVE-2016-6224  
Status
Candidate  
Description
ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946.  
Phase
Assigned (20160714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792307 93044 CVE-2016-6224 MLIST:[oss-security] 20160713 CVE Requests: Information exposure caused by ecryptfs-setup-swap failures  View
792308 93044 CVE-2016-6224 URL:http://www.openwall.com/lists/oss-security/2016/07/13/2  View
792309 93044 CVE-2016-6224 MLIST:[oss-security] 20160714 Re: CVE Requests: Information exposure caused by ecryptfs-setup-swap failures  View
792310 93044 CVE-2016-6224 URL:http://www.openwall.com/lists/oss-security/2016/07/14/3  View
792311 93044 CVE-2016-6224 CONFIRM:https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/882  View
792312 93044 CVE-2016-6224 CONFIRM:https://bugs.launchpad.net/ecryptfs/+bug/1597154  View
792313 93044 CVE-2016-6224 CONFIRM:https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282  View
792314 93044 CVE-2016-6224 UBUNTU:USN-3032-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4044 JVNDB-2016-004817 AVer Information EH6108H+ デバイスのファームウェアにおける重要な情報を取得される脆弱性 AVer Information EH6108H+ デバイスのファームウェアは、平文の Base64 フォーマットでパスワードを保存し、HTTP Cookie ヘッダの平文の認証情報を要求するため、重要な情報を取得される脆弱性が存在します。 CVE-2016-6537 93044 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004817.html  View