CVE-2015-3202

EPSS 0.34%

ntfs-3g - security update

Published: 7/2/2015Modified: 3/9/2026
Also known as:DSA-3268-2DEBIAN-CVE-2015-3202

Description

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

Affected packages (8)

References (1)