Vulnerability Bulletins |
DSA-3450 ecryptfs-utils - security update |
|
| Affected software | Debian |
|
Jann Horn discovered that the setuid-root mount.ecryptfs_private helperin the ecryptfs-utils would mount over any target directory that theuser owns, including a directory in procfs. A local attacker could usethis flaw to escalate his privileges. More info: https://www.debian.org/security/2016/dsa-3450 |
|