fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade fuse | Jul 30, 2024 | Sep 2, 2011 |
| Oracle_linux | — | Upgrade fuse-develUpgrade fuse-libsUpgrade fuse | Oct 16, 2024 | Sep 2, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 2, 2010 |
| Ubuntu | — | Upgrade fuse-utils | Nov 8, 2024 | Sep 2, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub