Lucene search

K
osvGoogleOSV:USN-5326-1
HistoryMar 16, 2022 - 10:20 p.m.

fuse vulnerability

2022-03-1622:20:55
Google
osv.dev
15
fuse
vulnerability
selinux
bypass
dos
risk
file system
local attacker
non-root privileges

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

48.8%

It was discovered that FUSE is susceptible to a restriction bypass flaw
on a system that has SELinux active. A local attacker with non-root
privileges could mount a FUSE file system that is accessible to other
users and trick them into accessing files on that file system, which
could result in a Denial of Service or other unspecified conditions.