CVE-2011-1834 Security feature bypass in n/a

Low 2.1 Published 15 Feb 2014 Updated 6 Aug 2024

Local attackers can corrupt the mount table or bypass unmount restrictions in ecryptfs-utils, causing denial of service or security bypass.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2011-1834?

CVE-2011-1834 is a low-severity vulnerability in n/a, published on 15 Feb 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.

Weakness: CWE-264

Which versions are affected by CVE-2011-1834?

It affects 2 products.

Products include Ecryptfs Ecryptfs-Utils, Ecryptfs Ecryptfs Utils.

How do I fix CVE-2011-1834?

Upgrade to a fixed version.

Is CVE-2011-1834 being exploited?

There is no known exploitation of CVE-2011-1834 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2011-1834, GHSA-3786-55ch-9g5p.