CVE-2014-9687: eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for att...

Security readout for executives and security teams

eCryptfs 104 and earlier used a default salt when encrypting a mount passphrase. That weakens protection for stored encrypted-home credentials and can make offline password guessing easier if an attacker obtains the relevant wrapped passphrase data. Exposure is most likely on older Linux systems using eCryptfs 104 or earlier for encrypted home or private directories. Ubuntu and openSUSE advisories are cited, but the bundle does not enumerate all affected distributions or package versions. Treat this as a targeted credential-protection weakness, not a broad remote compromise. Prioritize legacy Linux endpoints or servers using eCryptfs, especially where attackers could access user home-directory encryption metadata. Mitigation focus: Identify systems using eCryptfs and record installed package versions.; Prioritize systems running eCryptfs 104 or earlier.; Apply updates from the operating system or distribution vendor..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.