Command injection in Samba cifs-utils
Priority LOW 32CWE-77Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Deferred Red Hat: fix deferred
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-77.
Summary
It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.
Why it matters now
EPSS 0.00652 51st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Deferred Red Hat: fix deferred
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samba | cifs-utils | 6.11 | — | No fix listed | CNA |
- cifs-utils VendorSamba Affected 6.11 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:* | 5.6 – 6.10 | Vulnerable | Samba |
| cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* | 32 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* | 33 | Vulnerable | Fedoraproject |
| cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* | 15.1 | Vulnerable | openSUSE |
- cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:* Versions 5.6 – 6.10 Vulnerable ·Samba
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* Versions 32 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* Versions 33 Vulnerable ·Fedoraproject
- cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 7 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
Not affected: 1 product
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2020-14342
- 2026-10-03 Alias added: GHSA-7mmj-72wg-6gpv
- 2026-10-14 EPSS moved to the 50th–90th percentile
References
More Samba Cifs-utils vulnerabilities
- TI-2022-10358 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip=… CVSS 3.1HIGH 7.8
- TI-2022-12225 cifs-utils through 6.14, with verbose logging, can cause an information leak when a file… CVSS 3.1MEDIUM 5.3
- TI-2021-03504 Improper privilege management in cifs-utils CVSS 3.1MEDIUM 6.1
Sources
- CVE-2020-14342 · CVE Program
- CVE-2020-14342 · NVD
- FIRST EPSS
- GHSA-7mmj-72wg-6gpv · GitHub Advisory Database · CC BY 4.0
- CVE-2020-14342 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences