CVE-2015-8946

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-08-04T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-07-22T12:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "[oss-security] 20160714 Re: CVE Requests: Information exposure caused by ecryptfs-setup-swap failures", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/07/14/3"}, {"name": "[oss-security] 20160713 CVE Requests: Information exposure caused by ecryptfs-setup-swap failures", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2016/07/13/2"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282"}, {"name": "USN-3032-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/USN-3032-1"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-8946", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[oss-security] 20160714 Re: CVE Requests: Information exposure caused by ecryptfs-setup-swap failures", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/07/14/3"}, {"name": "[oss-security] 20160713 CVE Requests: Information exposure caused by ecryptfs-setup-swap failures", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2016/07/13/2"}, {"name": "https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857", "refsource": "CONFIRM", "url": "https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857"}, {"name": "https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282", "refsource": "CONFIRM", "url": "https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282"}, {"name": "USN-3032-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/USN-3032-1"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T08:36:30.716Z"}, "title": "CVE Program Container", "references": [{"name": "[oss-security] 20160714 Re: CVE Requests: Information exposure caused by ecryptfs-setup-swap failures", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/07/14/3"}, {"name": "[oss-security] 20160713 CVE Requests: Information exposure caused by ecryptfs-setup-swap failures", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/07/13/2"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282"}, {"name": "USN-3032-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/USN-3032-1"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-8946", "datePublished": "2016-07-22T14:00:00.000Z", "dateReserved": "2016-07-14T00:00:00.000Z", "dateUpdated": "2024-08-06T08:36:30.716Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*", "matchCriteriaId": "E88A537F-F4D0-46B9-9E37-965233C2A355", "vulnerable": true}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:*", "matchCriteriaId": "76E0F5E8-3299-416E-8931-D7F9F68CD4D0", "versionEndIncluding": "110", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors."}, {"lang": "es", "value": "ecryptfs-setup-swap en eCryptfs en versiones anteriores a 111 no impide la activaci\u00f3n de la partici\u00f3n de intercambio sin cifrar durante el inicio cuando se utiliza el particionamiento GPT y ciertas versiones de systemd, lo que permite a usuarios locales obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."}], "id": "CVE-2015-8946", "lastModified": "2026-06-17T00:35:32.363", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-07-22T14:59:00.147", "references": [{"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2016/07/13/2"}, {"source": "cve@mitre.org", "url": "http://www.openwall.com/lists/oss-security/2016/07/14/3"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-3032-1"}, {"source": "cve@mitre.org", "url": "https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857"}, {"source": "cve@mitre.org", "url": "https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2016/07/13/2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2016/07/14/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.ubuntu.com/usn/USN-3032-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "ecryptfs-utils: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning", "id": "1356825", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1356825"}, "csaw": false, "cvss": {"cvss_base_score": "4.0", "cvss_scoring_vector": "AV:L/AC:H/Au:N/C:C/I:N/A:N", "status": "draft"}, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-200", "details": ["ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors."], "name": "CVE-2015-8946", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Not affected", "package_name": "ecryptfs-utils", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "ecryptfs-utils", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2015-08-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2015-8946\nhttps://nvd.nist.gov/vuln/detail/CVE-2015-8946"], "threat_severity": "Moderate"}

{}