header-logo
Suggest Exploit
vendor:
Filesystem in Userspace (FUSE)
by:
Sven Tantau
4.3
CVSS
MEDIUM
Local Information Disclosure
200
CWE
Product Name: Filesystem in Userspace (FUSE)
Affected Version From: 2.2
Affected Version To: 2.3-rc1
Patch Exists: YES
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Linux
2005

FUSE Local Information Disclosure Vulnerability

FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows malicious local users to gain access to potentially sensitive kernel memory, aiding them in further attacks.

Mitigation:

Upgrade to FUSE version 2.3.0 or later.
Source

Exploit-DB raw data: