[ GLSA 202007-20 ] fuseiso

[GLSA]

Gentoo Linux Security Advisory

Title: fuseiso: Multiple vulnerabilities (GLSA 202007-20)
Severity: normal
Exploitable: remote
Date: 2020-07-27
Bug(s): #713328
ID: 202007-20

Synopsis

Multiple vulnerabilities have been found in fuseiso, the worst of
which could result in the arbitrary execution of code.


Background

FuseISO is a FUSE module to mount ISO filesystem images (.iso, .nrg,
.bin, .mdf and .img files).


Affected Packages

Package: sys-fs/fuseiso
Vulnerable: < 20070708-r3
Unaffected: >= 20070708-r3
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in fuseiso. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to open a specially crafted ISO
file using fuseiso, possibly resulting in execution of arbitrary code
with the privileges of the process or a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All fuseiso users should upgrade to the latest version: