CVE-2011-3145: When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective gr

Routine

LOW 3.8WATCHLISTMITIGATE

CVE-2011-3145 is a low-severity flaw (CVSS 3.8) affecting mount.ecrpytfs private. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

Why this priority

On your watchlist

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	3.8 (Low)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	1.0% (top 38%)
CISA exploited list	No
Weakness	CWE-254
Published	2019-04-22
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: mount.ecrpytfs private project

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2019-04-22 16:29 UTCPublished CVE record published
2026-06-16 23:32 UTCUpdated Record last modified

mount.ecrpytfs private project mount.ecrpytfs private MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy mount.ecrpytfs-private || rpm -q mount.ecrpytfs-private || mount.ecrpytfs-private --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2011-3145?

mount.ecrpytfs private: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2011-3145 being exploited?

CVE-2011-3145 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2011-3145 affect?

CVE-2011-3145 affects mount.ecrpytfs private. Severity is low (CVSS 3.8). When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

How urgent is CVE-2011-3145?

Priority 34/100. On your watchlist

References

← Back to latest CVEs