Summary
Tavis Ormandy discovered that FUSE incorrectly filtered environment
variables. A local attacker could use this issue to gain administrative
privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | fuse | 2.9.2-4ubuntu4.14.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2015-3202 Public exploit
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as r…
References
-
report
https://ubuntu.com/security/CVE-2015-3202