CVE-2014-9687

Publication date 31 December 2014

Last updated 24 July 2024

Ubuntu priority

eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
ecryptfs-utils	14.10 utopic	Fixed 104-0ubuntu1.14.10.3
	14.04 LTS trusty	Fixed 104-0ubuntu1.14.04.3
	12.04 LTS precise	Fixed 96-0ubuntu3.4
	10.04 LTS lucid	Fixed 83-0ubuntu3.2.10.04.6

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-2524-1
eCryptfs vulnerability
11 March 2015

Other references

https://bugs.launchpad.net/ecryptfs/+bug/906550/comments/5
http://seclists.org/oss-sec/2015/q1/498
https://www.cve.org/CVERecord?id=CVE-2014-9687