CVE-2015-3202

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

CVSS v2.0

3.6 LOWAV:L/AC:L/Au:N/C:N/I:P/A:P

EPSS

1.01% chance of exploitation in the next 30 days, 61th percentile

Published

2015-07-02

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/37089

References

• CVE Record
• NVD entry

Related

• CVE-2015-3197
• CVE-2015-3203
• CVE-2015-3195
• CVE-2015-3205
• CVE-2015-3194
• CVE-2015-3214