漏洞类别:Amazon Linux
漏洞等级:
漏洞信息
Package updates are available for Amazon Linux that fix the following vulnerabilities: CVE-2015-3202: It was discovered that fusermount failed to properly sanitize its environment before executing mount and umount commands. A local user could possibly use this flaw to escalate their privileges on the system. 1224103: CVE-2015-3202 fuse: incorrect filtering of environment variables leading to privilege escalation
漏洞危害
Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.
解决方案
Administrators are advised to apply the appropriate software updates.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论