CVE-2015-3202

3.6

LOWCVSS v2

Published

July 2, 2015

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

fuse

NPMThe magical GraphQL framework

<= 2.9.2NVD

krisk/Fuse

GitHubLightweight fuzzy-search, in JavaScript

<= 2.9.2NVD

smebberson/fuse

GitHub

More on this CVE

NVD↗GitHub Advisory↗

A command line tool to combine JavaScript files

<= 2.9.2NVD

jboss-fuse/fuse

GitHubJBoss Fuse is an open source ESB with capabilities based on Apache Camel, Apache CXF, Apache ActiveMQ, Apache Karaf and Fabric8 in a single integrated distribution.

<= 2.9.2NVD

Security Advisories

CVE-2015-3202

Description

More on this CVE