fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ntfs-3gUpgrade fuse | Jul 30, 2024 | Jul 2, 2015 |
| Gentoo Linux | — | Upgrade sys-fs/ntfs3g.Upgrade sys-fs/fuse. | Oct 30, 2017 | Jul 2, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade fuse-develUpgrade fuse-libsUpgrade fuse | May 1, 2019 | Jul 2, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade fuse-develUpgrade fuseUpgrade fuse-libs | May 30, 2019 | Jul 2, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade fuse-develUpgrade fuseUpgrade fuse-libs | May 1, 2019 | Jul 2, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2015 |
| Suse | — | Upgrade libulockmgr1Upgrade fuse-devel-staticUpgrade fuse-docUpgrade fuse-develUpgrade libfuse2Upgrade fuse | Dec 18, 2015 | Jun 10, 2015 |
| Ubuntu | — | Upgrade ntfs-3gUpgrade fuse | Nov 8, 2024 | Jul 2, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub