{"id":"CVE-2021-20208","aliases":["ALPINE-CVE-2021-20208","AZL-6354","DEBIAN-CVE-2021-20208","EUVD-2021-7651","GHSA-jx7v-8q27-738q","MGASA-2021-0277","OESA-2021-1193","SUSE-SU-2021:1159-1","SUSE-SU-2021:1161-1","SUSE-SU-2021:1455-1","UBUNTU-CVE-2021-20208","USN-5459-1","USN-7688-1","openSUSE-SU-2021:0639-1","openSUSE-SU-2024:10683-1"],"status":"published","title":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file...","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00666,"percentile":0.52271,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-266","CWE-269"],"published":"2021-04-13T09:35:37Z","modified":"2026-10-24T10:30:46Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cifs-utils","fixed_in":["6.13-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cifs-utils","fixed_in":["6.8-6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cifs-utils","fixed_in":["2:6.11-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cifs-utils","fixed_in":["2:6.11-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cifs-utils","fixed_in":["2:6.11-3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"cifs-utils","fixed_in":["6.9-6.2.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"cifs-utils","fixed_in":["6.11-2.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"cifs-utils","fixed_in":["6.10-2.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"cifs-utils","fixed_in":["6.9-5.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","fixed_in":["2:6.0-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","fixed_in":["2:6.4-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","fixed_in":["2:6.8-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","fixed_in":["2:6.9-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"6.13-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.11-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.11-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.11-3"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-6.2.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11-2.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-2.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-5.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0-1ubuntu2+esm1"}]}],"versions":["2:6.0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.4-1ubuntu1.1+esm1"}]}],"versions":["2:6.4-1ubuntu1","2:6.4-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-1ubuntu1.2"}]}],"versions":["2:6.7-1","2:6.8-1","2:6.8-1ubuntu1","2:6.8-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.9-1ubuntu0.2"}]}],"versions":["2:6.9-0ubuntu1","2:6.9-1","2:6.9-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-1ubuntu1.2"}]}],"versions":["2:6.7-1","2:6.8-1","2:6.8-1ubuntu1","2:6.8-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.9-1ubuntu0.2"}]}],"versions":["2:6.9-0ubuntu1","2:6.9-1","2:6.9-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1ubuntu0.1"}]}],"versions":["2:6.11-3.1","2:6.14-1","2:6.14-1build1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0-1ubuntu2+esm1"}]}],"versions":["2:6.0-1ubuntu2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.4-1ubuntu1.1+esm1"}]}],"versions":["2:6.4-1ubuntu1","2:6.4-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-lp152.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-1.3"}]}],"bundled":16}],"products":[{"vendor":"cifs-utils","product":"cifs-utils"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"samba","product":"cifs-utils"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921116","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=14651","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4BZSJXROEFHYATAAHHRR6P3HUSMPQB3/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WJ3SVBHCSNQZAWSGLB6FBOCFU45FFG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20208","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/66WJ3SVBHCSNQZAWSGLB6FBOCFU45FFG/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z4BZSJXROEFHYATAAHHRR6P3HUSMPQB3/"},{"url":"https://github.com/advisories/GHSA-jx7v-8q27-738q"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-20208","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20208","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0277.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29056","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/65NUX6IGI72XJIWLCF5QOKIKAWWJUMEY/","tags":["web","advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1193","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211159-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183239","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20208","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211161-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211455-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1152930","tags":["report"]},{"url":"https://bugzilla.suse.com/1174477","tags":["report"]},{"url":"https://bugzilla.suse.com/1184815","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14342","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-20208","tags":["report"]},{"url":"https://lists.samba.org/archive/samba-technical/2021-April/136467.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5459-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20208","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7688-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29869","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-20208","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T21:12:00Z","modified":"2024-08-03T17:30:07.497Z","cwes":["CWE-266"],"updated_at":"2026-11-02T14:32:55.19484Z"}],"euvd":[{"id":"EUVD-2021-7651","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T21:12:00Z","modified":"2024-08-03T17:30:07Z","updated_at":"2026-11-03T03:25:09.355483Z"}],"ghsa":[{"id":"GHSA-jx7v-8q27-738q","title":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file...","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2022-05-24T17:47:54Z","modified":"2023-01-27T05:01:56Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"cwes":["CWE-266","CWE-269"],"updated_at":"2026-11-02T14:41:59.85242Z"}],"nvd":[{"id":"CVE-2021-20208","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T22:15:12.873Z","modified":"2026-06-17T03:33:28.4Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-266","CWE-269"],"updated_at":"2026-11-02T14:06:52.03307Z"}],"osv":[{"id":"ALPINE-CVE-2021-20208","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T22:15:12.873Z","modified":"2026-10-23T17:17:56.137421879Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6354","title":"CVE-2021-20208 affecting package cifs-utils for versions less than 6.8-6","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T22:15:12Z","modified":"2026-04-21T04:32:10.445846Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"CVE-2021-20208","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T22:15:12.873Z","modified":"2026-10-24T10:30:46.886610941Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2021-20208","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T22:15:12.873Z","modified":"2026-10-23T18:04:48.792594833Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"OESA-2021-1193","title":"cifs-utils security update","description":"The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.(CVE-2021-20208)","status":"published","published":"2021-05-24T11:04:26Z","modified":"2026-08-18T01:15:40.398065324Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-20208","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.","status":"published","published":"2021-04-19T22:15:00Z","modified":"2026-02-04T03:26:53.267414Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"MGASA-2021-0277","title":"Updated cifs-utils packages fix a security vulnerability","description":"A flaw was found in cifs-utils in versions before 6.13. A user when mounting a \nkrb5 CIFS file system from within a container can use Kerberos credentials of \nthe host. The highest threat from this vulnerability is to data confidentiality \nand integrity (CVE-2021-20208).\n","status":"published","published":"2021-06-23T17:11:28Z","modified":"2026-04-16T04:44:37.273253599Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0639-1","title":"Security update for cifs-utils","description":"\nThis update for cifs-utils fixes the following security issues:\n\n- CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. (bsc#1183239)\n- CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. (bsc#1174477)\n\nThis update for cifs-utils fixes the following issues:\n\n- Solve invalid directory mounting. When attempting to change the current\n  working directory into non-existing directories, mount.cifs crashes.\n  (bsc#1152930)\n\n- Fixed a bug where it was no longer possible to mount CIFS filesystem after\n  the last maintenance update. (bsc#1184815)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-04-30T19:23:06Z","modified":"2026-02-04T03:03:04.703354Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:10683-1","title":"cifs-utils-6.13-1.3 on GA media","description":"These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:27:26.032876Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2021:1159-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container (bsc#1183239)\t  \n","status":"published","published":"2021-04-13T09:35:37Z","modified":"2026-02-04T02:28:27.328913Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1161-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container (bsc#1183239)\n","status":"published","published":"2021-04-13T09:36:00Z","modified":"2026-02-04T03:54:27.078451Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1455-1","title":"Security update for cifs-utils","description":"\nThis update for cifs-utils fixes the following security issues:\n\n- CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. (bsc#1183239)\n- CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. (bsc#1174477)\n\nThis update for cifs-utils fixes the following issues:\n\n- Solve invalid directory mounting. When attempting to change the current\n  working directory into non-existing directories, mount.cifs crashes.\n  (bsc#1152930)\n\n- Fixed a bug where it was no longer possible to mount CIFS filesystem after\n  the last maintenance update. (bsc#1184815)\n","status":"published","published":"2021-04-30T09:58:58Z","modified":"2026-02-04T04:27:04.455621Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-5459-1","title":"cifs-utils vulnerabilities","description":"Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a\npassword. In certain environments, a local attacker could possibly use this\nissue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-14342)\n\nIt was discovered that cifs-utils incorrectly used host credentials when\nmounting a krb5 CIFS file system from within a container. An attacker\ninside a container could possibly use this issue to obtain access to\nsensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. (CVE-2021-20208)\n\nIt was discovered that cifs-utils incorrectly handled certain command-line\narguments. A local attacker could possibly use this issue to obtain root\nprivileges. (CVE-2022-27239)\n\nIt was discovered that cifs-utils incorrectly handled verbose logging. A\nlocal attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2022-29869)\n","status":"published","published":"2022-06-02T16:41:26Z","modified":"2026-02-10T04:42:38Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-7688-1","title":"cifs-utils vulnerabilities","description":"Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a\npassword. In certain environments, a local attacker could possibly use this\nissue to escalate privileges. (CVE-2020-14342)\n\nIt was discovered that cifs-utils incorrectly used host credentials when\nmounting a krb5 CIFS file system from within a container. An attacker\ninside a container could possibly use this issue to obtain access to\nsensitive information. (CVE-2021-20208)\n\nIt was discovered that cifs-utils incorrectly handled certain command-line\narguments. A local attacker could possibly use this issue to obtain root\nprivileges. (CVE-2022-27239)\n\nIt was discovered that cifs-utils incorrectly handled verbose logging. A\nlocal attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2022-29869)","status":"published","published":"2025-08-07T09:24:31Z","modified":"2026-06-25T13:32:30.715866707Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}