Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

Debian DSA-3266-1: Critical FUSE Privilege Escalation Risk

debian
Calendar Grey May 21, 2015
Debian Logo
The Ubuntu Security Notice USN-3266-1 addresses a significant vulnerability in FUSE that can facilitate unauthorized privilege escalation and lead to potential file corruption.
Tavis Ormandy discovered that FUSE, a Filesystem in USErspace, does not scrub the environment before executing mount or umount with elevated privileges
Topics%20covered

Topics Covered

security advisory critical debian privilege escalation file overwrite linux package fuse

Summary

For the oldstable distribution (wheezy), this problem has been fixed
in version 2.9.0-2+deb7u2.

For the stable distribution (jessie), this problem has been fixed in
version 2.9.3-15+deb8u1.

For the testing distribution (stretch) and the unstable distribution
(sid), this problem will be fixed soon.

We recommend that you upgrade your fuse packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: fuse
CVE ID: CVE-2015-3202

Topics%20covered

Topics Covered

security advisory critical debian privilege escalation file overwrite linux package fuse

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here