{"action":"Upgrade fuse to 2.9.5-1 or later.","affected":[{"fixed":"2.9.5-1","introduced":"0"}],"component":"fuse","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2.9.5-1"],"id":"tcs_01M5NBF87NGVXQKHEZXHCSMMXW","modified_at":"2026-09-22T07:00:18.736726777Z","published_at":"2016-01-26T19:59:03.373Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-1233","https://security-tracker.debian.org/tracker/CVE-2016-1233"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-1233#Debian:13/fuse","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-1233"}],"summary":"An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character d"}