TI-2018-07719 CVE-2018-10906 · GHSA-35h9-x59q-8xcf
Improper authorization in [UNKNOWN] fuse
Priority LOW 37
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active.
Fuse Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Fuse Project records in CISA KEVNo Fuse Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Fuse · all components
TI-2015-02832 CVE-2015-3202 · GHSA-32rg-hvr8-56hx
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before…
Priority LOW 19
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment var…