Fuse Project

Fuse

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2018-10906

Exploit
  • EPSS 0.06%
  • Published 24.07.2018 20:29:00
  • Last modified 21.11.2024 03:42:16

In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_...

3.6

CVE-2015-3202

Exploit
  • EPSS 0.31%
  • Published 02.07.2015 21:59:03
  • Last modified 12.04.2025 10:46:40

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's ...