CVE:CVE-2016-1572
CNNVD:CNNVD-201601-614
ecryptfs-utils是一套基于Linux平台下的企业文件加密系统。
ecryptfs-utils的mount.ecryptfs_private.c文件中存在安全漏洞，该漏洞源于程序没有正确验证挂载目标文件系统的类型。本地攻击者可通过将程序安装在非标准的文件系统中利用该漏洞获取权限。
solution:Upgrade ecryptfs ecryptfs-utils to a higher version than 109,and avoid the version (,109); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23