Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3996

Опубликовано: 23 авг. 2022
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
Версия от 2.34 (включая) до 2.37.3 (исключая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

EPSS

Процентиль: 47%
0.00241
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-552
CWE-552

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS3: 5.5
redhat
почти 4 года назад

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS3: 5.5
msrc
2 месяца назад

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS3: 5.5
debian
больше 3 лет назад

A logic error was found in the libmount library of util-linux in the f ...

CVSS3: 3.3
fstec
почти 4 года назад

Уязвимость стандартного пакета служебных утилит командной строки util-linux, связанная с некорректными разрешениями и привилегиями доступа, позволяющая нарушителю обойти введенные ограничения безопасности

EPSS

Процентиль: 47%
0.00241
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-552
CWE-552