Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2014-2830

cifs-utils: stack-based buffer overflow flaw in pam_cifscreds

Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed
Vendors
Debian
Products
Cifs-utils
CVE-2012-1586

cifs-utils: mount.cifs file existence disclosure vulnerability

mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Debian Redhat
Products
Cifs-utils Enterprise Linux
CVE-2022-29869

cifs-utils: crafted input may cause an information leak

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

CVSS 3.1 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Samba
Products
Debian Linux Fedora Cifs-utils
CVE-2022-27239

cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Hp and 3 more
Products
Debian Linux Fedora Helion Openstack and 17 more