Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-29869

cifs-utils: crafted input may cause an information leak

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

CVSS 3.1 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Samba
Products
Debian Linux Fedora Cifs-utils
CVE-2022-27239

cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Hp and 3 more
Products
Debian Linux Fedora Helion Openstack and 17 more
CVE-2021-20208

cifs-utils: Container can use kerberos cache from the host via mount.cifs/cifs.upcall

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat Samba
Products
Fedora Enterprise Linux Cifs-utils
CVE-2020-14342

cifs-utils: shell command injection in mount.cifs

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Opensuse Samba
Products
Fedora Leap Cifs-utils