Summary
It was discovered that FUSE is susceptible to a restriction bypass flaw
on a system that has SELinux active. A local attacker with non-root
privileges could mount a FUSE file system that is accessible to other
users and trick them into accessing files on that file system, which
could result in a Denial of Service or other unspecified conditions.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | fuse | 2.9.4-1ubuntu3.1+esm1 |
Vulnerabilities 1
-
Medium 5.3CVE-2018-10906 Public exploit
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is ac…
References
-
report
https://ubuntu.com/security/CVE-2018-10906