Skip to content
OpenAdvisories

Package · Debian

fuse-overlayfs

1 known vulnerabilities.

1 result · Feed

  • Low 2.0

    fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC)

    fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged pro…