Vulnerabilities

TI-2022-12225 CVE-2022-29869 · GHSA-pwjc-pm2q-cpg2

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file…

LOW 28

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01918 Published 2022-04-28 Fix deferred CWE-532

TI-2022-10358 CVE-2022-27239 · GHSA-mhc8-vv44-hh59

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip=…

LOW 35

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2022-04-27 Partial fix CWE-787

TI-2021-03504 CVE-2021-20208 · GHSA-jx7v-8q27-738q

Improper privilege management in cifs-utils

LOW 28

A flaw was found in cifs-utils in versions before 6.13.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00666 Published 2021-04-19 No fix listed CWE-266

TI-2020-11213 CVE-2020-14342 · GHSA-7mmj-72wg-6gpv

Command injection in Samba cifs-utils

LOW 32

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00652 Published 2020-09-09 Fix deferred CWE-77

Vulnerabilities

Filters

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file…

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip=…

Improper privilege management in cifs-utils

Command injection in Samba cifs-utils