CVE-2018-10906
Fixed in a distro release EPSS 1%CVSS 5.3
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
Products: debian_linux, fuse_project fuse, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | fuse | 2.9.8-r0 |
| Alpine 3.10 | fuse3 | 3.2.5-r0 |
| Alpine 3.11 | fuse | 2.9.8-r0 |
| Alpine 3.11 | fuse3 | 3.2.5-r0 |
| Alpine 3.12 | fuse | 2.9.8-r0 |
| Alpine 3.12 | fuse3 | 3.2.5-r0 |
| Alpine 3.13 | fuse | 2.9.8-r0 |
| Alpine 3.13 | fuse3 | 3.2.5-r0 |
| Alpine 3.14 | fuse | 2.9.8-r0 |
| Alpine 3.14 | fuse3 | 3.2.5-r0 |
| Alpine 3.15 | fuse | 2.9.8-r0 |
| Alpine 3.15 | fuse3 | 3.2.5-r0 |
| Alpine 3.16 | fuse | 2.9.8-r0 |
| Alpine 3.16 | fuse3 | 3.2.5-r0 |
| Alpine 3.17 | fuse | 2.9.8-r0 |
| Alpine 3.17 | fuse3 | 3.2.5-r0 |
| Alpine 3.18 | fuse | 2.9.8-r0 |
| Alpine 3.18 | fuse3 | 3.2.5-r0 |
| Alpine 3.19 | fuse | 2.9.8-r0 |
| Alpine 3.19 | fuse3 | 3.2.5-r0 |
| Alpine 3.20 | fuse | 2.9.8-r0 |
| Alpine 3.20 | fuse3 | 3.2.5-r0 |
| Alpine 3.21 | fuse3 | 3.2.5-r0 |
| Alpine 3.22 | fuse3 | 3.2.5-r0 |
| Alpine 3.23 | fuse3 | 3.2.5-r0 |
| Alpine 3.24 | fuse3 | 3.2.5-r0 |
| Alpine 3.5 | fuse | 2.9.8-r0 |
| Alpine 3.6 | fuse | 2.9.8-r0 |
| Alpine 3.7 | fuse | 2.9.8-r0 |
| Alpine 3.8 | fuse | 2.9.8-r0 |
| Alpine 3.9 | fuse | 2.9.8-r0 |
| Alpine 3.9 | fuse3 | 3.2.5-r0 |
| Amazon Linux 2 | fuse | 2.9.2-11.amzn2 |
| Amazon Linux 2 | fuse-devel | 2.9.2-11.amzn2 |
| Amazon Linux 2 | fuse-libs | 2.9.2-11.amzn2 |
| Debian 12 | fuse | 2.9.8-1 |
| Debian 12 | fuse3 | 3.2.6-1 |
| Debian 13 | fuse | 2.9.8-1 |
| Debian 13 | fuse3 | 3.2.6-1 |
| Debian 14 | fuse3 | 3.2.6-1 |
| Debian 8 | fuse | 2.9.3-15+deb8u3 |
| Debian 9 | fuse | 2.9.7-1+deb9u1 |
| Red Hat Enterprise Linux 7 | fuse | 0:2.9.2-11.el7 |
| Red Hat Enterprise Linux 7 | fuse-debuginfo | 0:2.9.2-11.el7 |
| Red Hat Enterprise Linux 7 | fuse-devel | 0:2.9.2-11.el7 |
| Red Hat Enterprise Linux 7 | fuse-libs | 0:2.9.2-11.el7 |
| SUSE Linux Enterprise Desktop 12 SP3 | fuse | 2.9.3-6.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | fuse | 2.9.7-3.3.1 |
| SUSE Linux Enterprise Server 11 SP4 | fuse | 2.8.7-0.11.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | fuse | 2.9.3-6.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | fuse | 2.8.7-0.11.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | fuse | 2.9.3-6.3.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | fuse | 2.8.7-0.11.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | fuse | 2.9.3-6.3.1 |
| Ubuntu 14.04 LTS | fuse | no fix |
| Ubuntu 18.04 LTS | fuse | no fix |
| Ubuntu Pro 16.04 LTS | fuse | 2.9.4-1ubuntu3.1+esm1 |