CVE-2018-10906: High severity debian linux vulnerability
FUSE through version 3.2.4 is vulnerable to a bypass of the 'userallowother' restriction that allows, when SELinux is active, non-root users to mount FUSE file systems with the 'allowother' mount option. Local users can exploit this with the 'fusermount' command, bypassing the system configuration. This results in a mounted file system accessible by all other users including root.
Other sources
In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10906?
CVE-2018-10906 has a severity rating of medium, as it allows non-root users to mount FUSE filesystems with the 'allow_other' option, potentially leading to unauthorized access.
How do I fix CVE-2018-10906?
To fix CVE-2018-10906, update FUSE to versions 2.9.9-1+deb10u1, 3.4.1-1+deb10u1, or later, depending on the operating system.
What systems are affected by CVE-2018-10906?
CVE-2018-10906 affects various systems using FUSE versions up to 3.2.4 and specifically targets Debian and Red Hat environments.
What configurations are bypassed by CVE-2018-10906?
CVE-2018-10906 allows local users to bypass the 'user_allow_other' restriction when SELinux is active.
Can non-root users exploit CVE-2018-10906?
Yes, non-root users can exploit CVE-2018-10906 to mount FUSE file systems with elevated permissions using the 'fusermount' command.