CVE-2011-3145: Mount.ecrpytfs Private Project Mount.ecrpytfs Private

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

Affected products

• Mount.ecrpytfs Private Project Mount.ecrpytfs Private: affected versions not specified

Published 2019-04-22. Last modified 2026-06-16.