{"id":"CVE-2015-8946","aliases":["DEBIAN-CVE-2015-8946","EUVD-2015-8802","GHSA-75gv-98wv-gmx4","SUSE-SU-2018:0336-1"],"status":"published","title":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from...","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","severity":{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00353,"percentile":0.29168,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2016-07-22T14:00:00Z","modified":"2026-09-09T07:02:06Z","fixes":[{"ecosystem":"Debian:12","package":"ecryptfs-utils","fixed_in":["111-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ecryptfs-utils","fixed_in":["111-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ecryptfs-utils","fixed_in":["111-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"111-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"111-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"111-1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"103-8.3.1"}]}],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"ecryptfs","product":"ecryptfs-utils"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/07/14/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2016/07/13/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/857","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1447282","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3032-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8946"},{"url":"https://github.com/advisories/GHSA-75gv-98wv-gmx4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8946","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180336-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/989121","tags":["report"]},{"url":"https://bugzilla.suse.com/989122","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6224","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-8946","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2016-07-22T14:00:00Z","modified":"2024-08-06T08:36:30.716Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-8802","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2016-07-22T14:00:00Z","modified":"2024-08-06T08:36:30Z","updated_at":"2026-11-03T01:57:25.349664Z"}],"ghsa":[{"id":"GHSA-75gv-98wv-gmx4","title":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from...","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2022-05-17T03:50:59Z","modified":"2023-01-27T05:08:23Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:17.773763Z"}],"nvd":[{"id":"CVE-2015-8946","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2016-07-22T14:59:00.147Z","modified":"2026-06-17T00:35:32.363Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"CVE-2015-8946","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2016-07-22T14:59:00Z","modified":"2026-04-10T03:46:35.381149Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8946","description":"ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.","status":"published","published":"2016-07-22T14:59:00.147Z","modified":"2026-09-09T07:02:06.281414187Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"SUSE-SU-2018:0336-1","title":"Security update for ecryptfs-utils","description":"This update for ecryptfs-utils fixes the following issues:\n\n- CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning (bsc#989121)\n- CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive (bsc#989122)\n","status":"published","published":"2018-02-01T09:39:39Z","modified":"2025-05-02T04:04:54.287708Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}