CVE-2011-1837: Low severity ecryptfs-utils vulnerability
Published Feb 15, 2014
·Updated
Last updated 24 July 2024
Other sources
The lock-counter implementation in utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
Affected Software
32 affected componentsFixes available
ecryptfs ecryptfs-utils<=89
ecryptfs ecryptfs-utils=62
ecryptfs ecryptfs-utils=63
ecryptfs ecryptfs-utils=64
ecryptfs ecryptfs-utils=65
ecryptfs ecryptfs-utils=66
ecryptfs ecryptfs-utils=67
ecryptfs ecryptfs-utils=68
ecryptfs ecryptfs-utils=69
ecryptfs ecryptfs-utils=70
ecryptfs ecryptfs-utils=71
ecryptfs ecryptfs-utils=72
ecryptfs ecryptfs-utils=73
ecryptfs ecryptfs-utils=74
ecryptfs ecryptfs-utils=75
ecryptfs ecryptfs-utils=76
ecryptfs ecryptfs-utils=77
ecryptfs ecryptfs-utils=78
ecryptfs ecryptfs-utils=79
ecryptfs ecryptfs-utils=80
ecryptfs ecryptfs-utils=81
ecryptfs ecryptfs-utils=82
ecryptfs ecryptfs-utils=83
ecryptfs ecryptfs-utils=84
ecryptfs ecryptfs-utils=85
ecryptfs ecryptfs-utils=86
ecryptfs ecryptfs-utils=87
ecryptfs Ecryptfs Utils=58
ecryptfs Ecryptfs Utils=59
ecryptfs Ecryptfs Utils=60
ecryptfs Ecryptfs Utils=61
debian/ecryptfs-utils
111-5111-6111-8
Event History
Feb 15, 2014
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·09:56 PM
Description
Sep 15, 2024
Data Sourced
via Ubuntu·10:40 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-1837?
CVE-2011-1837 is considered a medium to high severity vulnerability due to the potential for local users to overwrite arbitrary files.
2
How do I fix CVE-2011-1837?
To fix CVE-2011-1837, update the ecryptfs-utils package to version 90 or higher.
3
What versions of ecryptfs-utils are affected by CVE-2011-1837?
CVE-2011-1837 affects all versions of ecryptfs-utils prior to 90, including versions 58 to 89.
4
Can CVE-2011-1837 be exploited remotely?
CVE-2011-1837 cannot be exploited remotely as it requires local user access to the system.
5
Who is impacted by CVE-2011-1837?
Local users on systems running vulnerable versions of ecryptfs-utils are impacted by CVE-2011-1837.