vendor:
Filesystem in Userspace (FUSE)
by:
Sven Tantau
4.3
CVSS
MEDIUM
Local Information Disclosure
200
CWE
Product Name: Filesystem in Userspace (FUSE)
Affected Version From: 2.2
Affected Version To: 2.3-rc1
Patch Exists: YES
Related CWE:
CPE:
Platforms Tested: Linux
2005
FUSE Local Information Disclosure Vulnerability
FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows malicious local users to gain access to potentially sensitive kernel memory, aiding them in further attacks.
Mitigation:
Upgrade to FUSE version 2.3.0 or later.