CVE-2011-1836
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with...
CVE-2011-1836 is a medium vulnerability (CVSS 4.6) in Ecryptfs Ecryptfs-utils, published February 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in ecryptfs-utils 92-1.
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
Exploit likelihood
What each source reports
NVD Score used
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
- Record
CVE-2011-1836- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
- Record
CVE-2011-1836- Updated
- 2026-11-02
EUVDEUVD-2011-1834 No score
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
- Record
EUVD-2011-1834- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5764-q5mh-rcg7 No score
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with...
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
- Record
GHSA-5764-q5mh-rcg7- Updated
- 2026-11-02
OSV No score
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
- Record
CVE-2011-1836- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1836 No score
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
- Record
DEBIAN-CVE-2011-1836- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10118-1 No score
ecryptfs-utils-108-2.5 on GA media
These are all security issues fixed in the ecryptfs-utils-108-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10118-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ecryptfs-utilsDebian:12 |
before 92-1 | 92-1 |
ecryptfs-utilsDebian:13 |
before 92-1 | 92-1 |
ecryptfs-utilsDebian:14 |
before 92-1 | 92-1 |
ecryptfs-utilsopenSUSE:Tumbleweed |
before 108-2.5 | 108-2.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html
launchpad.net/ecryptfs/+download
bugzilla.redhat.com/show_bug.cgi?id=729465
ubuntu.com/usn/USN-1188-1
nvd.nist.gov/vuln/detail/CVE-2011-1836
github.com/advisories/GHSA-5764-q5mh-rcg7
Show 10 moreShow less
security-tracker.debian.org/tracker/CVE-2011-1836
suse.com/security/cve/CVE-2011-1831