CVE-2018-12560: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. Arbitrary unmounts can be performed by regular users via directory traversal sequences such as a home/../sys/kernel substring...

Design/Logic Flaw

fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors...

Command injection

usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command...

PT-2011-3398

Name of the Vulnerable Software and Affected Versions usb-creator versions prior to 0.2.28.3 Description The issue allows local users to perform arbitrary unmount operations. This is due to the failure of usb-creator-helper to enforce intended PolicyKit restrictions. The UnmountFile method can be...