Vendors / Samba Records 285 All Threatist records
Exploited (KEV) 2
CVSS critical 38
CVSS high 104
Exploited now Samba records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00576 · Published 2022-04-27 · Partial fix CWE-787
Priority LOW 32
It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands.
CVSS 3.1 HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00652 · Published 2020-09-09 · Fix deferred CWE-77
Priority LOW 28
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01918 · Published 2022-04-28 · Fix deferred CWE-532
Priority LOW 28
A flaw was found in cifs-utils in versions before 6.13.
CVSS 3.1 MEDIUM 6.1· Local · Low privileges · User interaction · EPSS 0.00666 · Published 2021-04-19 · No fix listed CWE-266
Open these records in search → All records by CVSS severity
38 104 122 21 0
