Vulnerability Intelligence Report
CVE-2016-1233
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an ioctl.
No Active Exploit Signals
CVSS Base Score
7.8
HIGH
EPSS Probability:0.37%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| debian | fuse | all |
| debian | debian_linux | 8.0 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.369%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Debian GNU/Linux · Vendor · USA |
| Reserved | 2015-12-27T00:00:00 |
| Published | 2016-01-26T19:00:00 |
| Patch Date | 2016-01-20 |
| Last Updated | 2024-08-05T22:48:13 |
Community Chatter & Buzz