CVE-2011-0543 — Fuse vulnerability

CWE-2648 documents8 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 80.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat FuseFuse
Timeline
PublishedSep 2
Latest updateMay 17

Description

Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack.

CVSS vector

AV:L/AC:M/C:N/I:P/A:PExploitability: 3.4 | Impact: 4.9

Affected Packages2 packages

▶Debianredhat/fuse< 2.8.5-1+2
▶NVDfuse/fuse2.8.5+30

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-2g2x-4qqh-7m58: Certain legacy functionality in fusermount in fuse 2↗2022-05-17
▶
OSV
CVE-2011-0543: Certain legacy functionality in fusermount in fuse 2↗2011-09-02
▶
CVEList
CVE-2011-0543: Certain legacy functionality in fusermount in fuse 2↗2011-09-02
▶

📋Vendor Advisories

3
Ubuntu
FUSE vulnerabilities↗2011-02-28
▶
Debian
CVE-2011-0543: fuse - Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-...↗2011
▶
Red Hat
fuse: unprivileged user can unmount arbitrary locations via symlink attack↗2010-11-02
▶

💬Community

1
Bugzilla
CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack↗2010-11-08
▶
CVE-2011-0543 — Fuse vulnerability | cvebase