CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
CVE-2022-27239- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
CVE-2022-27239- Updated
- 2026-11-02
EUVDEUVD-2022-31748 No score
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
EUVD-2022-31748- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mhc8-vv44-hh59
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
GHSA-mhc8-vv44-hh59- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
ALPINE-CVE-2022-27239- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-9587
CVE-2022-27239 affecting package cifs-utils for versions less than 6.14-2
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
AZL-9587- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 18 moreShow less
OSVDEBIAN-CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
DEBIAN-CVE-2022-27239- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1626
cifs-utils security update
The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. The in-kernel CIFS filesystem relies on a set of user-space tools. That package of tools is called cifs-utils.Although not really part of Samba proper, these tools were originally part of the Samba package. For several reasons, shipping these tools as part of Samba was problematic and it was deemed better to split them off into their own package.
Security Fix(es):
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.(CVE-2022-29869)
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.(CVE-2022-27239)
- Record
OESA-2022-1626- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2023:3052
Red Hat Bug Fix Advisory: cifs-utils bug fix and enhancement update
- Record
RHBA-2023:3052- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
UBUNTU-CVE-2022-27239- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1792442320 No score
cifs-utils: Fix of CVE-2022-27239
- CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support
- Record
CLSA-2026-1792442320- Updated
- 2026-11-02
OSVCLSA-2026-1792442514 No score
cifs-utils: Fix of CVE-2022-27239
- CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support
- Record
CLSA-2026-1792442514- Updated
- 2026-11-02
OSV No score
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Record
CVE-2022-27239- Updated
- 2026-11-02
OSVMGASA-2022-0170 No score
Updated cifs-utils packages fix security vulnerability
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges. (CVE-2022-27239)
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file. (CVE-2022-29869)
- Record
MGASA-2022-0170- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12087-1 No score
cifs-utils-6.15-1.1 on GA media
These are all security issues fixed in the cifs-utils-6.15-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12087-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1427-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:1427-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1428-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:1428-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1429-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:1429-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1430-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:1430-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14950-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:14950-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14951-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:14951-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2378-1 No score
Security update for cifs-utils
This update for cifs-utils fixes the following issues:
- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).
- Record
SUSE-SU-2022:2378-1- Updated
- 2026-11-02
OSVUSN-5459-1 No score
cifs-utils vulnerabilities
Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14342)
It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system from within a container. An attacker inside a container could possibly use this issue to obtain access to sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-20208)
It was discovered that cifs-utils incorrectly handled certain command-line arguments. A local attacker could possibly use this issue to obtain root privileges. (CVE-2022-27239)
It was discovered that cifs-utils incorrectly handled verbose logging. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2022-29869)
- Record
USN-5459-1- Updated
- 2026-11-02
OSVUSN-7688-1 No score
cifs-utils vulnerabilities
Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. (CVE-2020-14342)
It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system from within a container. An attacker inside a container could possibly use this issue to obtain access to sensitive information. (CVE-2021-20208)
It was discovered that cifs-utils incorrectly handled certain command-line arguments. A local attacker could possibly use this issue to obtain root privileges. (CVE-2022-27239)
It was discovered that cifs-utils incorrectly handled verbose logging. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2022-29869)
- Record
USN-7688-1- Updated
- 2026-11-02
Affected products
- samba cifs-utils
- debian linux
- fedoraproject fedora
- hp helion openstack
- suse caas platform
- suse enterprise storage
- suse linux enterprise desktop
- suse linux enterprise high performance computing
- suse linux enterprise micro
- suse linux enterprise point of service
- suse linux enterprise real time
- suse linux enterprise server
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cifs-utilsAlpine:v3.16 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.17 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.18 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.19 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.20 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.21 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.22 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.23 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAlpine:v3.24 |
before 6.15-r0 | 6.15-r0 |
cifs-utilsAzure Linux:2 |
before 6.14-2 | 6.14-2 |
Show 75 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cifs-utilsTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 6.2-10.el7.0.5.tuxcare.els3 | 6.2-10.el7.0.5.tuxcare.els3 |
cifs-utils-develTuxCare:RHEL:7 From an advisory covering 2 CVEs |
before 6.2-10.el7.0.5.tuxcare.els3 | 6.2-10.el7.0.5.tuxcare.els3 |
cifs-utilsTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 6.2-10.el7.0.5.tuxcare.els3 | 6.2-10.el7.0.5.tuxcare.els3 |
cifs-utils-develTuxCare:OracleLinux:7 From an advisory covering 2 CVEs |
before 6.2-10.el7.0.5.tuxcare.els3 | 6.2-10.el7.0.5.tuxcare.els3 |
cifs-utilsDebian:12 |
before 2:6.14-1.1 | 2:6.14-1.1 |
cifs-utilsDebian:13 |
before 2:6.14-1.1 | 2:6.14-1.1 |
cifs-utilsDebian:14 |
before 2:6.14-1.1 | 2:6.14-1.1 |
cifs-utilsDebian:9 From an advisory covering 2 CVEs |
before 2:6.7-1+deb9u1, plus listed versions 2:6.7-1 |
2:6.7-1+deb9u1 |
cifs-utilsDebian:10 From an advisory covering 2 CVEs |
before 2:6.8-2+deb10u1, plus listed versions 2:6.8-2 |
2:6.8-2+deb10u1 |
cifs-utilsDebian:11 From an advisory covering 2 CVEs |
before 2:6.11-3.1+deb11u1, plus listed versions 2:6.11-3.1 |
2:6.11-3.1+deb11u1 |
cifs-utilsMageia:8 From an advisory covering 2 CVEs |
before 6.11-2.2.mga8 | 6.11-2.2.mga8 |
cifs-utilsopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 6.10-5.oe1 | 6.10-5.oe1 |
cifs-utilsopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 6.10-5.oe1 | 6.10-5.oe1 |
cifs-utilsopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 6.14-3.oe2203 | 6.14-3.oe2203 |
cifs-utilsRed Hat:enterprise_linux:8::baseos |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
cifs-utils-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
cifs-utils-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
pam_cifscredsRed Hat:enterprise_linux:8::baseos |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
pam_cifscreds-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
cifs-utils-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
cifs-utils-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
cifs-utils-develRed Hat:enterprise_linux:8::crb |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
pam_cifscreds-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:7.0-1.el8 | 0:7.0-1.el8 |
cifs-utilsSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 6.9-150000.3.17.1 | 6.9-150000.3.17.1 |
cifs-utilsSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 6.9-150000.3.17.1 | 6.9-150000.3.17.1 |
cifs-utilsSUSE:Linux Enterprise Server 15-LTSS |
before 6.9-150000.3.17.1 | 6.9-150000.3.17.1 |
cifs-utilsSUSE:Linux Enterprise Server for SAP Applications 15 |
before 6.9-150000.3.17.1 | 6.9-150000.3.17.1 |
cifs-utilsSUSE:HPE Helion OpenStack 8 |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:OpenStack Cloud 8 |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:OpenStack Cloud Crowbar 8 |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:Linux Enterprise Server 12 SP2-BCL |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:Linux Enterprise Server 12 SP3-BCL |
before 6.9-9.18.1 | 6.9-9.18.1 |
cifs-utilsSUSE:OpenStack Cloud 9 |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:OpenStack Cloud Crowbar 9 |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:Linux Enterprise Server 12 SP5 |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 6.9-13.20.1 | 6.9-13.20.1 |
cifs-utilsSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Real Time 15 SP2 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Server 15 SP1-BCL |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Server 15 SP2-BCL |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Manager Proxy 4.1 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Manager Retail Branch Server 4.1 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Manager Server 4.1 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Micro 5.2 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Enterprise Storage 6 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Enterprise Storage 7 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsopenSUSE:Leap 15.3 |
before 6.9-150100.5.15.1 | 6.9-150100.5.15.1 |
cifs-utilsSUSE:Linux Enterprise Point of Sale 11 SP3 |
before 5.1-0.14.3.1 | 5.1-0.14.3.1 |
cifs-utilsSUSE:Linux Enterprise Server 11 SP4-LTSS |
before 5.1-0.16.3.1 | 5.1-0.16.3.1 |
cifs-utilsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 6.15-150400.3.6.1 | 6.15-150400.3.6.1 |
cifs-utilsopenSUSE:Leap 15.4 |
before 6.15-150400.3.6.1 | 6.15-150400.3.6.1 |
cifs-utilsUbuntu:Pro:14.04:LTS |
before 2:6.0-1ubuntu2+esm1, plus listed versions 2:6.0-1ubuntu2 |
2:6.0-1ubuntu2+esm1 |
cifs-utilsUbuntu:Pro:16.04:LTS |
before 2:6.4-1ubuntu1.1+esm1, plus listed versions 2:6.4-1ubuntu12:6.4-1ubuntu1.1 |
2:6.4-1ubuntu1.1+esm1 |
cifs-utilsUbuntu:18.04:LTS |
before 2:6.8-1ubuntu1.2, plus listed versions 2:6.7-12:6.8-12:6.8-1ubuntu12:6.8-1ubuntu1.1 |
2:6.8-1ubuntu1.2 |
cifs-utilsUbuntu:20.04:LTS |
before 2:6.9-1ubuntu0.2, plus listed versions 2:6.9-0ubuntu12:6.9-12:6.9-1ubuntu0.1 |
2:6.9-1ubuntu0.2 |
cifs-utilsUbuntu:22.04:LTS |
before 2:6.14-1ubuntu0.1, plus listed versions 2:6.11-3.12:6.14-12:6.14-1build1 |
2:6.14-1ubuntu0.1 |
cifs-utilsUbuntu:18.04:LTS From an advisory covering 4 CVEs |
before 2:6.8-1ubuntu1.2, plus listed versions 2:6.7-12:6.8-12:6.8-1ubuntu12:6.8-1ubuntu1.1 |
2:6.8-1ubuntu1.2 |
cifs-utilsUbuntu:20.04:LTS From an advisory covering 4 CVEs |
before 2:6.9-1ubuntu0.2, plus listed versions 2:6.9-0ubuntu12:6.9-12:6.9-1ubuntu0.1 |
2:6.9-1ubuntu0.2 |
cifs-utilsUbuntu:22.04:LTS From an advisory covering 4 CVEs |
before 2:6.14-1ubuntu0.1, plus listed versions 2:6.11-3.12:6.14-12:6.14-1build1 |
2:6.14-1ubuntu0.1 |
cifs-utilsUbuntu:Pro:14.04:LTS From an advisory covering 4 CVEs |
before 2:6.0-1ubuntu2+esm1, plus listed versions 2:6.0-1ubuntu2 |
2:6.0-1ubuntu2+esm1 |
cifs-utilsUbuntu:Pro:16.04:LTS From an advisory covering 4 CVEs |
before 2:6.4-1ubuntu1.1+esm1, plus listed versions 2:6.4-1ubuntu12:6.4-1ubuntu1.1 |
2:6.4-1ubuntu1.1+esm1 |
cifs-utilsopenSUSE:Tumbleweed |
before 6.15-1.1 | 6.15-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-27239 is a high vulnerability (CVSS 7.8) in Samba Cifs-utils, published April 27, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. Fixed in cifs-utils 6.15-r0.
References
bugzilla.suse.com/show_bug.cgi?id=1197216
wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba
github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765
bugzilla.samba.org/show_bug.cgi?id=15025
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP
Show 44 moreShow less
lists.debian.org/debian-lts-announce/2022/05/msg00020.html
debian.org/security/2022/dsa-5157
security.gentoo.org/glsa/202311-05
nvd.nist.gov/vuln/detail/CVE-2022-27239
security.alpinelinux.org/vuln/CVE-2022-27239
errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792442320.html
security-tracker.debian.org/tracker/CVE-2022-27239
advisories.mageia.org/MGASA-2022-0170.html
bugs.mageia.org/show_bug.cgi?id=30360
openwall.com/lists/oss-security/2022/04/27/5
lists.opensuse.org/archives/list/[email protected]/thread/QMGM2N6RR7GOZR7OP37QJTCTTLTTIWUN
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1626
access.redhat.com/errata/RHBA-2023:3052
bugzilla.redhat.com/show_bug.cgi?id=2163373
security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_3052.json
cve.org/CVERecord?id=CVE-2022-27239
suse.com/support/update/announcement/2022/suse-su-20221427-1
ubuntu.com/security/CVE-2022-27239