CVE-2018-10906

In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.

References

Affected packages

Git / github.com/libfuse/libfuse

Affected ranges

Type

GIT

Repo

https://github.com/libfuse/libfuse

Events

Introduced

Fixed

6172ece7177fec28f3a771bbd445d5e9b9d5acd0

Introduced

1186ccaa8d5f0fb3fed384781ec9e89dd8060202

Fixed

932f4190e2b65419cef9960e27a7f94fcab9c816

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.9.8"
        },
        {
            "introduced": "3.0"
        },
        {
            "fixed": "3.2.5"
        }
    ]
}

Affected versions

fuse-2.*

fuse-2.9.6

fuse-2.9.7

fuse-3.*

fuse-3.0.0

fuse-3.0.0pre0

fuse-3.0.0rc1

fuse-3.0.0rc2

fuse-3.0.0rc3

fuse-3.0.1

fuse-3.0.2

fuse-3.1.0

fuse-3.1.1

fuse-3.2.0

fuse-3.2.1

fuse-3.2.2

fuse-3.2.3

fuse-3.2.4

Other

fuse_2_9_1

fuse_2_9_2

fuse_2_9_3

fuse_2_9_4

fuse_2_9_5

fuse_3_0_start

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-10906.json"