CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.8%

CVSS Severity

CVSS v2 Score 3.6

References

Products affected by CVE-2015-3202

Fuse Project » Fuse » Version: 2.4.0

cpe:2.3:a:fuse_project:fuse:2.4.0
Fuse Project » Fuse » Version: 2.4.1

cpe:2.3:a:fuse_project:fuse:2.4.1
Fuse Project » Fuse » Version: 2.4.2

cpe:2.3:a:fuse_project:fuse:2.4.2
Fuse Project » Fuse » Version: 2.5.0

cpe:2.3:a:fuse_project:fuse:2.5.0
Fuse Project » Fuse » Version: 2.5.2

cpe:2.3:a:fuse_project:fuse:2.5.2
Fuse Project » Fuse » Version: 2.5.3

cpe:2.3:a:fuse_project:fuse:2.5.3
Fuse Project » Fuse » Version: 2.6.0

cpe:2.3:a:fuse_project:fuse:2.6.0
Fuse Project » Fuse » Version: 2.6.1

cpe:2.3:a:fuse_project:fuse:2.6.1
Fuse Project » Fuse » Version: 2.6.2

cpe:2.3:a:fuse_project:fuse:2.6.2
Fuse Project » Fuse » Version: 2.6.3

cpe:2.3:a:fuse_project:fuse:2.6.3
Fuse Project » Fuse » Version: 2.6.4

cpe:2.3:a:fuse_project:fuse:2.6.4
Fuse Project » Fuse » Version: 2.6.5

cpe:2.3:a:fuse_project:fuse:2.6.5
Fuse Project » Fuse » Version: 2.7.0

cpe:2.3:a:fuse_project:fuse:2.7.0
Fuse Project » Fuse » Version: 2.7.1

cpe:2.3:a:fuse_project:fuse:2.7.1
Fuse Project » Fuse » Version: 2.7.2

cpe:2.3:a:fuse_project:fuse:2.7.2
Fuse Project » Fuse » Version: 2.7.3

cpe:2.3:a:fuse_project:fuse:2.7.3
Fuse Project » Fuse » Version: 2.7.4

cpe:2.3:a:fuse_project:fuse:2.7.4
Fuse Project » Fuse » Version: 2.7.5

cpe:2.3:a:fuse_project:fuse:2.7.5
Fuse Project » Fuse » Version: 2.8.0

cpe:2.3:a:fuse_project:fuse:2.8.0
Fuse Project » Fuse » Version: 2.8.1

cpe:2.3:a:fuse_project:fuse:2.8.1
Fuse Project » Fuse » Version: 2.8.2

cpe:2.3:a:fuse_project:fuse:2.8.2
Fuse Project » Fuse » Version: 2.8.3

cpe:2.3:a:fuse_project:fuse:2.8.3
Fuse Project » Fuse » Version: 2.8.4

cpe:2.3:a:fuse_project:fuse:2.8.4
Fuse Project » Fuse » Version: 2.8.5

cpe:2.3:a:fuse_project:fuse:2.8.5
Fuse Project » Fuse » Version: 2.8.6

cpe:2.3:a:fuse_project:fuse:2.8.6
Fuse Project » Fuse » Version: 2.8.7

cpe:2.3:a:fuse_project:fuse:2.8.7
Fuse Project » Fuse » Version: 2.9.0

cpe:2.3:a:fuse_project:fuse:2.9.0
Fuse Project » Fuse » Version: 2.9.1

cpe:2.3:a:fuse_project:fuse:2.9.1
Fuse Project » Fuse » Version: 2.9.2

cpe:2.3:a:fuse_project:fuse:2.9.2
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3202

Products

Pricing

Contact Us