CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write…

published July 2, 2015

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01004 · 62.4th percentile
Published
2015-07-02T21:16Z
EPSS history
Timeline
  • 02 JUL 21:16Z
    fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write…
    cvelistv5