CVE-2018-10906

CVE-2018-10906 affects FUSE’s fusermount when SELinux is active, allowing non-root users to bypass the user_allow_other restriction and mount a FUSE filesystem accessible to other users. Publicly referenced advisories show affected fuse packages across distributions with fixed versions: Red Hat/C...

CVE-2015-3202

CVE-2015-3202 affects FUSE’s fusermount prior to 2.9.3-15, where environment variables are not fully cleared before invoking mount or umount as root. This allows a local unprivileged user to write to arbitrary files via a crafted LIBMOUNT_MTAB used by mount’s debugging feature, potentially enabli...