CVE-2018-10906

In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.

References

Affected packages

Git / github.com/libfuse/libfuse

Affected ranges

Type

GIT

Repo

https://github.com/libfuse/libfuse

Events

Introduced

Fixed

6172ece7177fec28f3a771bbd445d5e9b9d5acd0

Introduced

1186ccaa8d5f0fb3fed384781ec9e89dd8060202

Fixed

932f4190e2b65419cef9960e27a7f94fcab9c816

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.9.8"
        },
        {
            "introduced": "3.0"
        },
        {
            "fixed": "3.2.5"
        }
    ]
}

Affected versions

Other

before_interruptible

debian_version_0_95-1

debian_version_1_0-1

fuse_0_9

fuse_0_95

fuse_1_1

fuse_1_1_post1

fuse_1_1_pre1

fuse_1_1_pre2

fuse_1_2

fuse_1_3

fuse_1_4

fuse_1_9

fuse_2_0_merge1

fuse_2_0_merge2

fuse_2_0_merge3

fuse_2_0_merge4

fuse_2_0_merge5

fuse_2_0_pre0

fuse_2_1

fuse_2_1_pre0

fuse_2_1_pre1

fuse_2_2

fuse_2_2_1

fuse_2_2_merge1

fuse_2_2_merge2

fuse_2_2_merge3

fuse_2_2_pre1

fuse_2_2_pre4

fuse_2_2_pre5

fuse_2_2_pre6

fuse_2_3_0

fuse_2_3_pre1

fuse_2_3_pre2

fuse_2_3_pre3

fuse_2_3_pre4

fuse_2_3_pre5

fuse_2_3_pre6

fuse_2_3_pre7

fuse_2_3_rc1

fuse_2_4_0

fuse_2_4_0_pre2

fuse_2_4_0_rc1

fuse_2_4_1

fuse_2_4_2

fuse_2_5_0

fuse_2_5_0_pre1

fuse_2_5_0_pre2

fuse_2_5_2

fuse_2_5_3

fuse_2_6_0

fuse_2_6_0_pre1

fuse_2_6_0_pre2

fuse_2_6_0_pre3

fuse_2_6_0_rc1

fuse_2_6_0_rc2

fuse_2_6_0_rc3

fuse_2_6_1

fuse_2_6_2

fuse_2_6_3

fuse_2_6_4

fuse_2_6_5

fuse_2_6_merge1

fuse_2_6_merge2

fuse_2_6_merge3

fuse_2_7_0

fuse_2_7_0_rc1

fuse_2_7_1

fuse_2_7_2

fuse_2_7_2_before_indent

fuse_2_7_3

fuse_2_7_4

fuse_2_7_5

fuse_2_8_0

fuse_2_8_0_pre2

fuse_2_8_1

fuse_2_8_2

fuse_2_8_3

fuse_2_8_4

fuse_2_8_5

fuse_2_8_6

fuse_2_8_7

fuse_2_8_start

fuse_2_9_0

fuse_2_9_1

fuse_2_9_2

fuse_2_9_3

fuse_2_9_4

fuse_2_9_5

fuse_2_9_start

fuse_3_0_start

start

fuse-2.*

fuse-2.9.6

fuse-2.9.7

fuse-3.*

fuse-3.0.0

fuse-3.0.0pre0

fuse-3.0.0rc1

fuse-3.0.0rc2

fuse-3.0.0rc3

fuse-3.0.1

fuse-3.0.2

fuse-3.1.0

fuse-3.1.1

fuse-3.2.0

fuse-3.2.1

fuse-3.2.2

fuse-3.2.3

fuse-3.2.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10906.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]