Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3995

Опубликовано: 23 авг. 2022
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
Версия от 2.34 (включая) до 2.37.3 (исключая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00219
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-552
CWE-552

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 3 года назад

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS3: 4.7
redhat
больше 3 лет назад

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS3: 5.5
debian
почти 3 года назад

A logic error was found in the libmount library of util-linux in the f ...

suse-cvrf
больше 3 лет назад

Security update for libeconf, shadow and util-linux

suse-cvrf
больше 3 лет назад

Security update for libeconf, shadow and util-linux

EPSS

Процентиль: 45%
0.00219
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-552
CWE-552