GCVE - cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*

part: a version: 2.5.2 update: *

Vendor	Fuse (`592a3f27-8333-5c00-9d16-8c950326728d`)
Product	Fuse (`cb27a59b-f215-5e9f-b021-e8b0faeae215`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0543`	vulnerable	2026-06-08 04:56:37.771249	Details available Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack. Published: 2011-09-02T23:00:00.000Z Updated: 2024-08-06T21:58:24.991Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/02/02/2 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.openwall.com/lists/oss-security/2011/02/03/5 http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=cbd3a2a84068aae6e3fe32939d88470d712dbf47 http://www.openwall.com/lists/oss-security/2011/02/08/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0542`	vulnerable	2026-06-08 04:56:37.770247	Details available fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors. Published: 2011-09-02T23:00:00.000Z Updated: 2024-08-06T21:58:25.873Z Open on db.gcve.eu Reference links http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873 http://www.openwall.com/lists/oss-security/2011/02/02/2 http://www.openwall.com/lists/oss-security/2011/02/03/5 http://www.openwall.com/lists/oss-security/2011/02/08/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0541`	vulnerable	2026-06-08 04:56:37.758723	Details available fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack. Published: 2011-09-02T23:00:00.000Z Updated: 2024-08-06T21:58:24.968Z Open on db.gcve.eu Reference links http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=bf5ffb5fd8558bd799791834def431c0cee5a11f http://www.openwall.com/lists/oss-security/2011/02/02/2 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html http://www.openwall.com/lists/oss-security/2011/02/03/5 http://www.openwall.com/lists/oss-security/2011/02/08/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0789`	vulnerable	2026-06-08 04:52:04.510742	Details available fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint. Published: 2010-03-02T18:00:00.000Z Updated: 2024-08-07T00:59:39.262Z Open on db.gcve.eu Reference links http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633 http://www.vupen.com/english/advisories/2010/1107 http://www.debian.org/security/2010/dsa-1989	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Fuse

Notes

PURL mappings

Vulnerability references

Contribute