CVE-2011-1836: Ecryptfs Ecryptfs-Utils

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.

Affected products

• Ecryptfs Ecryptfs-Utils: up to and including 89; version 62 only; version 63 only; version 64 only; version 65 only; version 66 only; …
• Ecryptfs Ecryptfs Utils: version 58 only; version 59 only; version 60 only; version 61 only

Published 2014-02-15. Last modified 2026-06-16.