CVEvulnerability
CVE-2005-1858
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-06-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
Affected configurations
• fuse fuse 2.2
• fuse fuse 2.2.1
• fuse fuse 2.3 pre
• fuse fuse 2.3 rc1
Related
References
- http://bugs.debian.org/311634 Vendor Advisory
- http://secunia.com/advisories/15561/ Patch, Vendor Advisory
- http://secunia.com/advisories/16024 secunia.com
- http://securitytracker.com/id?1014107 securitytracker.com
- http://sourceforge.net/project/shownotes.php?release_id=331884 Vendor Advisory
- http://www.debian.org/security/2005/dsa-744 www.debian.org
- http://www.osvdb.org/17042 Vendor Advisory
- http://www.securityfocus.com/bid/13857 www.securityfocus.com
- http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt Vendor Advisory
- http://bugs.debian.org/311634 Vendor Advisory
- http://secunia.com/advisories/15561/ Patch, Vendor Advisory
- http://secunia.com/advisories/16024 secunia.com
- http://securitytracker.com/id?1014107 securitytracker.com
- http://sourceforge.net/project/shownotes.php?release_id=331884 Vendor Advisory
- http://www.debian.org/security/2005/dsa-744 www.debian.org
- http://www.osvdb.org/17042 Vendor Advisory
- http://www.securityfocus.com/bid/13857 www.securityfocus.com
- http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt Vendor Advisory