Lucene search
GoogleOSV:DLA-238-1HistoryJun 07, 2015 - 12:00 a.m.
fuse - security update
2015-06-0700:00:00
Google
osv.dev
13
EPSS
0
Percentile
0.4%
Tavis Ormandy discovered that FUSE, a Filesystem in USErspace, does not
scrub the environment before executing mount or umount with elevated
privileges. A local user can take advantage of this flaw to overwrite
arbitrary files and gain elevated privileges by accessing debugging
features via the environment that would not normally be safe for
unprivileged users.
For the old-oldstable distribution (squeeze-lts), this problem has been
fixed in version 2.8.4-1.1+deb6u1.
We recommend that you upgrade your fuse packages.
References
Related
fedora
fedora
[SECURITY] Fedora 20 Update: ntfs-3g-2015.3.14-2.fc20
2015-06-13 06:37:20
[SECURITY] Fedora 20 Update: fuse-2.9.4-1.fc20
2015-06-13 06:34:35
[SECURITY] Fedora 21 Update: ntfs-3g-2015.3.14-2.fc21
2015-06-05 23:54:27
openvas
openvas
Debian Security Advisory DSA 3268-1 (ntfs-3g - security update)
2015-05-22 00:00:00
Huawei EulerOS: Security Advisory for fuse (EulerOS-SA-2019-1575)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1053-1)
2021-04-19 00:00:00
nessus
nessus
RHEL 7 : fuse (Unpatched Vulnerability)
2024-06-03 00:00:00
GLSA-201701-19 : NTFS-3G: Privilege escalation
2017-01-12 00:00:00
EulerOS Virtualization 2.5.3 : fuse (EulerOS-SA-2019-1351)
2019-05-10 00:00:00
mageia
mageia
Updated fuse packages fix CVE-2015-3202
2015-05-27 19:57:52
exploitpack
exploitpack
Fuse 2.9.3-15 - Local Privilege Escalation
2015-05-23 00:00:00
ubuntu
ubuntu
NTFS-3G vulnerability
2015-05-27 00:00:00
NTFS-3G vulnerability
2015-05-22 00:00:00
FUSE vulnerability
2015-05-21 00:00:00
exploitdb
exploitdb
Fuse 2.9.3-15 - Local Privilege Escalation
2015-05-23 00:00:00
debian
debian
[SECURITY] [DSA 3266-1] fuse security update
2015-05-21 17:27:43
[SECURITY] [DLA 226-1] ntfs-3g security update
2015-05-25 18:02:01
[SECURITY] [DSA 3268-2] ntfs-3g security update
2015-05-26 19:46:52
gentoo
gentoo
NTFS-3G: Privilege escalation
2017-01-11 00:00:00
ubuntucve
ubuntucve
CVE-2015-3202
2015-05-21 00:00:00
osv
osv
ntfs-3g - security update
2015-05-22 00:00:00
ntfs-3g - security update
2015-05-22 00:00:00
fuse - security update
2015-05-21 00:00:00
amazon
amazon
Medium: fuse
2015-07-07 12:33:00
ibm
ibm
Security Bulletin: Vulnerability in FUSE affects PowerKVM (CVE-2015-3202)
2018-06-18 01:29:42
packetstorm
packetstorm
Fuse Local Privilege Escalation
2015-05-23 00:00:00
cve
cve
CVE-2015-3202
2015-07-02 21:59:03
debiancve
debiancve
CVE-2015-3202
2015-07-02 21:59:03
zdt
zdt
Fuse - Local Privilege Escalation Vulnerability
2015-05-23 00:00:00
prion
prion
Design/Logic Flaw
2015-07-02 21:59:00
securityvulns
securityvulns
fuse NTFS-3G privilege escalation
2015-05-25 00:00:00
[SECURITY] [DSA 3268-1] ntfs-3g security update
2015-05-25 00:00:00
cvelist
cvelist
CVE-2015-3202
2015-07-02 21:16:00
nvd
nvd
CVE-2015-3202
2015-07-02 21:59:03
rosalinux
rosalinux
Advisory ROSA-SA-2021-1837
2021-07-02 16:44:02