CVE-2016-1572
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types,...
CVE-2016-1572 is a high vulnerability (CVSS 8.4) in Ecryptfs Ecryptfs-utils, published January 20, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in ecryptfs-utils 106-2.
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
CVE-2016-1572- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE List No score
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
CVE-2016-1572- Updated
- 2026-11-02
EUVDEUVD-2016-2667 No score
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
EUVD-2016-2667- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v495-vr49-324q
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types,...
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
GHSA-v495-vr49-324q- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
OSV
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
CVE-2016-1572- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-1572
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
DEBIAN-CVE-2016-1572- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2016-1572
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.
- Record
UBUNTU-CVE-2016-1572- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.4 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10118-1 No score
ecryptfs-utils-108-2.5 on GA media
These are all security issues fixed in the ecryptfs-utils-108-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10118-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0241-1 No score
Security update for ecryptfs-utils
This update for ecryptfs-utils fixes the following issues:
- CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems (bsc#962052)
- CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks (bsc#920160)
- Record
SUSE-SU-2016:0241-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:0290-1 No score
Security update for ecryptfs-utils
This update for ecryptfs-utils fixes the following issues:
- CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems (bsc#962052)
- CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks (bsc#920160)
- Record
SUSE-SU-2016:0290-1- Updated
- 2026-11-02
OSVUSN-2876-1 No score
ecryptfs-utils vulnerability
Jann Horn discovered that mount.ecryptfs_private would mount over certain directories in the proc filesystem. A local attacker could use this to escalate their privileges. (CVE-2016-1572)
- Record
USN-2876-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ecryptfs-utilsDebian:12 |
before 106-2 | 106-2 |
ecryptfs-utilsDebian:13 |
before 106-2 | 106-2 |
ecryptfs-utilsDebian:14 |
before 106-2 | 106-2 |
ecryptfs-utilsDebian:6.0 |
before 83-4+squeeze2, plus listed versions 83-483-4+squeeze1 |
83-4+squeeze2 |
ecryptfs-utilsDebian:7 |
before 99-1+deb7u1, plus listed versions 99-1 |
99-1+deb7u1 |
ecryptfs-utilsDebian:8 |
before 103-5+deb8u1, plus listed versions 103-5 |
103-5+deb8u1 |
ecryptfs-utilsSUSE:Linux Enterprise Desktop 12 |
before 103-7.1 | 103-7.1 |
ecryptfs-utilsSUSE:Linux Enterprise Desktop 12 SP1 |
before 103-7.1 | 103-7.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server 12 |
before 103-7.1 | 103-7.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server for SAP Applications 12 |
before 103-7.1 | 103-7.1 |
Show 11 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ecryptfs-utilsSUSE:Linux Enterprise Server 12 SP1 |
before 103-7.1 | 103-7.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 103-7.1 | 103-7.1 |
ecryptfs-utilsSUSE:Linux Enterprise Desktop 11 SP3 |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsSUSE:Linux Enterprise Desktop 11 SP4 |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server 11 SP3 |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server 11 SP4 |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 61-1.35.1 | 61-1.35.1 |
ecryptfs-utilsUbuntu:14.04:LTS |
before 104-0ubuntu1.14.04.4, plus listed versions 103-0ubuntu2104-0ubuntu1104-0ubuntu1.14.04.3 |
104-0ubuntu1.14.04.4 |
ecryptfs-utilsopenSUSE:Tumbleweed |
before 108-2.5 | 108-2.5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-updates/2016-01/msg00091.html
securitytracker.com/id/1034791
bugs.launchpad.net/ecryptfs/+bug/1530566
openwall.com/lists/oss-security/2016/01/20/6
Show 24 moreShow less
ubuntu.com/usn/USN-2876-1
lists.fedoraproject.org/pipermail/package-announce/2016-February/177396.html
debian.org/security/2016/dsa-3450
bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870
nvd.nist.gov/vuln/detail/CVE-2016-1572
github.com/advisories/GHSA-v495-vr49-324q
security-tracker.debian.org/tracker/CVE-2016-1572
suse.com/support/update/announcement/2016/suse-su-20160241-1
bugzilla.suse.com/920160
ubuntu.com/security/CVE-2016-1572
cve.org/CVERecord?id=CVE-2016-1572