CVE-2021-3995

2022-08-2300:00:00

CWE-552

redhat

www.cve.org

logic error

libmount library

unprivileged user

unmount

fuse filesystem

denial of service

AI Score

5.6

Confidence

High

EPSS

Percentile

5.1%

JSON

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "util-linux",
    "versions": [
      {
        "version": "Fixed in util-linux v2.37.3",
        "status": "affected"
      }
    ]
  }
]