{"id":"CVE-2014-9687","aliases":["DEBIAN-CVE-2014-9687","EUVD-2014-9495","GHSA-mc6q-88m2-653g","SUSE-SU-2016:0241-1","SUSE-SU-2016:0290-1","UBUNTU-CVE-2014-9687","USN-2524-1","openSUSE-SU-2024:10118-1"],"status":"published","title":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it...","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0218,"percentile":0.82475,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-255"],"published":"2014-12-31T00:00:00Z","modified":"2026-10-23T15:47:31Z","fixes":[{"ecosystem":"Debian:12","package":"ecryptfs-utils","fixed_in":["103-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ecryptfs-utils","fixed_in":["103-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ecryptfs-utils","fixed_in":["103-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ecryptfs-utils","fixed_in":["104-0ubuntu1.14.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"61-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"104-0ubuntu1.14.04.3"}]}],"versions":["103-0ubuntu2","104-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"104-0ubuntu1.14.04.3"}]}],"versions":["103-0ubuntu2","104-0ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"108-2.5"}]}],"bundled":9}],"products":[{"vendor":"ecryptfs","product":"ecryptfs-utils"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/02/28/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/02/17/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/02/10/16","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugs.launchpad.net/ecryptfs/+bug/906550","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"http://www.ubuntu.com/usn/USN-2524-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9687"},{"url":"https://github.com/advisories/GHSA-mc6q-88m2-653g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9687","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160241-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/920160","tags":["report"]},{"url":"https://bugzilla.suse.com/962052","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1572","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160290-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9687","tags":["report"]},{"url":"https://bugs.launchpad.net/ecryptfs/+bug/906550/comments/5","tags":["report"]},{"url":"http://seclists.org/oss-sec/2015/q1/498","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2524-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9687","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1837","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9687","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2015-03-16T14:00:00Z","modified":"2024-08-06T13:55:04.224Z","updated_at":"2026-11-02T14:33:42.54191Z"}],"euvd":[{"id":"EUVD-2014-9495","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2015-03-16T14:00:00Z","modified":"2024-08-06T13:55:04Z","updated_at":"2026-11-03T01:56:48.455518Z"}],"ghsa":[{"id":"GHSA-mc6q-88m2-653g","title":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it...","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2022-05-17T03:30:23Z","modified":"2023-01-27T05:08:00Z","updated_at":"2026-11-02T14:43:13.955662Z"}],"nvd":[{"id":"CVE-2014-9687","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2015-03-16T14:59:00.067Z","modified":"2026-06-17T00:18:48.343Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-9687","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2015-03-16T14:59:00Z","modified":"2026-04-10T03:44:54.634952Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9687","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2015-03-16T14:59:00.067Z","modified":"2026-10-23T15:47:31.939974097Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"openSUSE-SU-2024:10118-1","title":"ecryptfs-utils-108-2.5 on GA media","description":"These are all security issues fixed in the ecryptfs-utils-108-2.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:30:12.50279Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:0241-1","title":"Security update for ecryptfs-utils","description":"\nThis update for ecryptfs-utils fixes the following issues:\n\n- CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems (bsc#962052)\n- CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks (bsc#920160)\n","status":"published","published":"2016-01-25T16:34:16Z","modified":"2026-02-04T03:54:37.392474Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0290-1","title":"Security update for ecryptfs-utils","description":"\nThis update for ecryptfs-utils fixes the following issues:\n\n- CVE-2016-1572: A local user could have escalated privileges by mounting over special filesystems (bsc#962052)\n- CVE-2014-9687: A default salt value reduced complexity of offline precomputation attacks (bsc#920160)\n","status":"published","published":"2016-01-30T19:29:33Z","modified":"2026-02-04T02:54:34.786476Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2014-9687","description":"eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.","status":"published","published":"2014-12-31T00:00:00Z","modified":"2026-04-22T09:56:55.673915Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2524-1","title":"ecryptfs-utils vulnerability","description":"Sylvain Pelissier discovered that eCryptfs did not generate a random salt when\nencrypting the mount passphrase with the login password. An attacker could use\nthis issue to discover the login password used to protect the mount passphrase\nand gain unintended access to the encrypted files.\n","status":"published","published":"2015-03-11T00:41:13Z","modified":"2026-04-22T09:09:18.652074Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}