PublicDateAtUSN: 2018-07-24 20:29:00 UTC
Candidate: CVE-2018-10906
PublicDate: 2018-07-24 20:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10906
 https://github.com/libfuse/libfuse/pull/268
 https://sourceforge.net/p/fuse/mailman/message/36374753/
 https://ubuntu.com/security/notices/USN-5326-1
Description:
 In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is
 vulnerable to a restriction bypass when SELinux is active. This allows
 non-root users to mount a FUSE file system with the 'allow_other' mount
 option regardless of whether 'user_allow_other' is set in the fuse
 configuration. An attacker may use this flaw to mount a FUSE file system,
 accessible by other users, and trick them into accessing files on that file
 system, possibly causing Denial of Service or other unspecified effects.
Ubuntu-Description:
Notes:
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904216
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904439
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]


Patches_fuse3:
upstream_fuse3: released (3.2.5)
precise/esm_fuse3: DNE
trusty_fuse3: DNE
trusty/esm_fuse3: DNE
xenial_fuse3: DNE
bionic_fuse3: DNE
cosmic_fuse3: DNE
disco_fuse3: ignored (reached end-of-life)
eoan_fuse3: ignored (reached end-of-life)
focal_fuse3: not-affected (3.9.0-2)
groovy_fuse3: not-affected (3.9.3-1)
hirsute_fuse3: not-affected (3.10.2-2build1)
impish_fuse3: not-affected (3.10.3-1)
jammy_fuse3: not-affected (3.10.3-1)
devel_fuse3: not-affected (3.10.3-1)

Patches_fuse:
upstream_fuse: released (2.9.8)
precise/esm_fuse: ignored (end of ESM support, was needs-triage)
trusty_fuse: ignored (reached end-of-life)
trusty/esm_fuse: needs-triage
xenial_fuse: ignored (end of standard support, was needs-triage)
esm-infra/xenial_fuse: released (2.9.4-1ubuntu3.1+esm1)
bionic_fuse: needed
cosmic_fuse: ignored (reached end-of-life)
disco_fuse: ignored (reached end-of-life)
eoan_fuse: ignored (reached end-of-life)
focal_fuse: not-affected (2.9.9-3)
groovy_fuse: not-affected (2.9.9-3)
hirsute_fuse: not-affected (2.9.9-4ubuntu2)
impish_fuse: not-affected (2.9.9-5ubuntu1)
jammy_fuse: not-affected (2.9.9-5ubuntu1)
devel_fuse: not-affected (2.9.9-5ubuntu1)