CVE-2015-7358: High severity ncipher vulnerability
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7358?
CVE-2015-7358 is classified as a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2015-7358?
To fix CVE-2015-7358, upgrade TrueCrypt to version 7.1 or later, VeraCrypt to version 1.15 or later, or CipherShed to a fixed version.
What systems are affected by CVE-2015-7358?
CVE-2015-7358 affects TrueCrypt 7.0, VeraCrypt versions up to 1.14, and CipherShed versions up to 0.7.5.0 on Windows.
What type of vulnerability is CVE-2015-7358?
CVE-2015-7358 is a privilege escalation vulnerability that allows local users to mount encrypted volumes improperly.
What can an attacker do with CVE-2015-7358?
An attacker can exploit CVE-2015-7358 to gain elevated privileges by mounting an encrypted volume over an existing drive letter.