CVE-2017-15121: Input Validation
A non-prigileged user is able to mount a fuse filesystem on RHEL6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
Other sources
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15121?
CVE-2017-15121 has a moderate severity rating as it allows a non-privileged user to crash a system.
How do I fix CVE-2017-15121?
To fix CVE-2017-15121, apply the recommended updates provided by Red Hat for affected versions of Enterprise Linux.
Which versions are affected by CVE-2017-15121?
CVE-2017-15121 affects Red Hat Enterprise Linux and its derivatives, specifically versions 6.0 to 7.6.
What is the impact of CVE-2017-15121 on my system?
The impact of CVE-2017-15121 is that a system can become unresponsive and crash due to a user being able to mount a FUSE filesystem.
Is there a workaround for CVE-2017-15121?
A potential workaround for CVE-2017-15121 is to restrict non-privileged users from mounting FUSE filesystems.