Описание
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
Релиз | Статус | Примечание |
---|---|---|
bionic | not-affected | code not present |
devel | released | 2.37.2-4ubuntu2 |
esm-infra-legacy/trusty | not-affected | code not present |
esm-infra/bionic | not-affected | code not present |
esm-infra/focal | not-affected | 2.34-0.1ubuntu9.3 |
esm-infra/xenial | not-affected | code not present |
focal | released | 2.34-0.1ubuntu9.3 |
impish | released | 2.36.1-8ubuntu2.2 |
jammy | released | 2.37.2-4ubuntu2 |
trusty | not-affected | code not present |
Показывать по
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.
A logic error was found in the libmount library of util-linux in the f ...
Security update for libeconf, shadow and util-linux
EPSS
5.5 Medium
CVSS3