{"id":"CVE-2022-27239","aliases":["ALPINE-CVE-2022-27239","AZL-9587","CLSA-2026-1792442320","CLSA-2026-1792442514","DEBIAN-CVE-2022-27239","DLA-3009-1","DSA-5157-1","EUVD-2022-31748","GHSA-mhc8-vv44-hh59","MGASA-2022-0170","OESA-2022-1626","RHBA-2023:3052","SUSE-SU-2022:1427-1","SUSE-SU-2022:1428-1","SUSE-SU-2022:1429-1","SUSE-SU-2022:1430-1","SUSE-SU-2022:14950-1","SUSE-SU-2022:14951-1","SUSE-SU-2022:2378-1","UBUNTU-CVE-2022-27239","USN-5459-1","USN-7688-1","openSUSE-SU-2024:12087-1"],"status":"published","title":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00576,"percentile":0.47781,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-04-27T00:00:00Z","modified":"2026-11-03T08:01:08Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cifs-utils","fixed_in":["6.14-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cifs-utils","fixed_in":["2:6.14-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cifs-utils","fixed_in":["2:6.14-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cifs-utils","fixed_in":["2:6.14-1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cifs-utils","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cifs-utils-debuginfo","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cifs-utils-debugsource","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_cifscreds","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_cifscreds-debuginfo","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"cifs-utils-debuginfo","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"cifs-utils-debugsource","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"cifs-utils-devel","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pam_cifscreds-debuginfo","fixed_in":["0:7.0-1.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"cifs-utils","fixed_in":["6.9-150000.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"cifs-utils","fixed_in":["6.9-150000.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"cifs-utils","fixed_in":["6.9-150000.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"cifs-utils","fixed_in":["6.9-150000.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"cifs-utils","fixed_in":["6.9-9.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"cifs-utils","fixed_in":["6.9-150100.5.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"cifs-utils","fixed_in":["5.1-0.14.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"cifs-utils","fixed_in":["5.1-0.16.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"cifs-utils","fixed_in":["6.15-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"cifs-utils","fixed_in":["6.15-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","fixed_in":["2:6.0-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","fixed_in":["2:6.4-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","fixed_in":["2:6.8-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","fixed_in":["2:6.9-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","fixed_in":["2:6.14-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cifs-utils","fixed_in":["6.15-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.el7.0.5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"cifs-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.el7.0.5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.el7.0.5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"cifs-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.el7.0.5.tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.7-1+deb9u1"}]}],"versions":["2:6.7-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-2+deb10u1"}]}],"versions":["2:6.8-2"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.11-3.1+deb11u1"}]}],"versions":["2:6.11-3.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11-2.2.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-5.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-5.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-3.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cifs-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"cifs-utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_cifscreds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"pam_cifscreds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"cifs-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"cifs-utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"cifs-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"pam_cifscreds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0-1.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150000.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150000.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150000.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150000.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-9.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-0.14.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-0.16.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0-1ubuntu2+esm1"}]}],"versions":["2:6.0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.4-1ubuntu1.1+esm1"}]}],"versions":["2:6.4-1ubuntu1","2:6.4-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-1ubuntu1.2"}]}],"versions":["2:6.7-1","2:6.8-1","2:6.8-1ubuntu1","2:6.8-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.9-1ubuntu0.2"}]}],"versions":["2:6.9-0ubuntu1","2:6.9-1","2:6.9-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1ubuntu0.1"}]}],"versions":["2:6.11-3.1","2:6.14-1","2:6.14-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-1ubuntu1.2"}]}],"versions":["2:6.7-1","2:6.8-1","2:6.8-1ubuntu1","2:6.8-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.9-1ubuntu0.2"}]}],"versions":["2:6.9-0ubuntu1","2:6.9-1","2:6.9-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1ubuntu0.1"}]}],"versions":["2:6.11-3.1","2:6.14-1","2:6.14-1build1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0-1ubuntu2+esm1"}]}],"versions":["2:6.0-1ubuntu2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.4-1ubuntu1.1+esm1"}]}],"versions":["2:6.4-1ubuntu1","2:6.4-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"hp","product":"helion_openstack"},{"vendor":"samba","product":"cifs-utils"},{"vendor":"suse","product":"caas_platform"},{"vendor":"suse","product":"enterprise_storage"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_high_performance_computing"},{"vendor":"suse","product":"linux_enterprise_micro"},{"vendor":"suse","product":"linux_enterprise_point_of_service"},{"vendor":"suse","product":"linux_enterprise_real_time"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"},{"vendor":"suse","product":"linux_enterprise_storage"},{"vendor":"suse","product":"manager_proxy"},{"vendor":"suse","product":"manager_retail_branch_server"},{"vendor":"suse","product":"manager_server"},{"vendor":"suse","product":"openstack_cloud"},{"vendor":"suse","product":"openstack_cloud_crowbar"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1197216","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765","tags":["x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=15025","tags":["x_transferred","Issue Tracking","Permissions Required","Vendor Advisory","report"]},{"url":"https://github.com/piastry/cifs-utils/pull/7","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5157","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202311-05","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27239","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/"},{"url":"https://github.com/advisories/GHSA-mhc8-vv44-hh59"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-27239","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792442320.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792442514.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27239.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-27239","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0170.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30360","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/04/27/5","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QMGM2N6RR7GOZR7OP37QJTCTTLTTIWUN/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29869","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2023:3052","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163373","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_3052.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27239","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221427-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197216","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27239","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221428-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221429-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221430-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214950-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214951-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222378-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-27239","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5459-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7688-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29869","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-27239","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T00:00:00Z","modified":"2024-08-03T05:25:32.591Z","updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-31748","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T00:00:00Z","modified":"2024-08-03T05:25:32Z","updated_at":"2026-11-03T03:25:43.539822Z"}],"ghsa":[{"id":"GHSA-mhc8-vv44-hh59","title":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-28T00:00:33Z","modified":"2023-12-03T05:04:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:55:08.580325Z"}],"nvd":[{"id":"CVE-2022-27239","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T14:15:09.203Z","modified":"2026-06-17T04:36:33.243Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"ALPINE-CVE-2022-27239","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T14:15:09.203Z","modified":"2026-11-03T07:18:33.13893422Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9587","title":"CVE-2022-27239 affecting package cifs-utils for versions less than 6.14-2","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T14:15:09Z","modified":"2026-04-21T04:35:04.979382Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"DEBIAN-CVE-2022-27239","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T14:15:09.203Z","modified":"2026-11-03T08:01:08.822414336Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-1626","title":"cifs-utils security update","description":"The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. The in-kernel CIFS filesystem relies on a set of user-space tools. That package of tools is called cifs-utils.Although not really part of Samba proper, these tools were originally part of the Samba package. For several reasons, shipping these tools as part of Samba was problematic and it was deemed better to split them off into their own package.\r\n\r\nSecurity Fix(es):\r\n\r\ncifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.(CVE-2022-29869)\n\nIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.(CVE-2022-27239)","status":"published","published":"2022-05-11T11:04:54Z","modified":"2026-08-18T01:16:32.082272984Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHBA-2023:3052","title":"Red Hat Bug Fix Advisory: cifs-utils bug fix and enhancement update","status":"published","published":"2025-04-16T10:01:43Z","modified":"2026-06-26T12:21:22.060524831Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2022-27239","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T14:15:00Z","modified":"2026-02-04T03:16:49.427641Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CLSA-2026-1792442320","title":"cifs-utils: Fix of CVE-2022-27239","description":"- CVE-2020-14342: mount.cifs shell command injection via username mount\n  option when built with systemd-ask-password support","status":"published","published":"2026-10-19T20:38:51Z","modified":"2026-10-26T09:43:44.452020403Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CLSA-2026-1792442514","title":"cifs-utils: Fix of CVE-2022-27239","description":"- CVE-2020-14342: mount.cifs shell command injection via username mount\n  option when built with systemd-ask-password support","status":"published","published":"2026-10-19T20:42:06Z","modified":"2026-10-26T09:43:50.143894557Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CVE-2022-27239","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.","status":"published","published":"2022-04-27T00:00:00Z","modified":"2026-10-28T02:30:41.217037179Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"DLA-3009-1","title":"cifs-utils - security update","status":"published","published":"2022-05-16T00:00:00Z","modified":"2026-03-09T01:19:11.352864Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5157-1","title":"cifs-utils - security update","status":"published","published":"2022-06-03T00:00:00Z","modified":"2026-03-09T02:08:59.81349Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0170","title":"Updated cifs-utils packages fix security vulnerability","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the\nmount.cifs ip= command-line argument could lead to local attackers gaining\nroot privileges. (CVE-2022-27239)\n\ncifs-utils through 6.14, with verbose logging, can cause an information\nleak when a file contains = (equal sign) characters but is not a valid\ncredentials file. (CVE-2022-29869)\n","status":"published","published":"2022-05-12T10:24:45Z","modified":"2026-04-16T04:42:51.342009916Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12087-1","title":"cifs-utils-6.15-1.1 on GA media","description":"These are all security issues fixed in the cifs-utils-6.15-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:02:21.876972Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1427-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-04-27T08:00:00Z","modified":"2026-02-04T04:31:21.917338Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1428-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-04-27T08:00:07Z","modified":"2026-02-04T02:53:00.027551Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1429-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-04-27T08:00:29Z","modified":"2026-02-04T03:50:48.077755Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1430-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-04-27T08:01:56Z","modified":"2026-02-04T03:34:46.976026Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:14950-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-04-27T07:59:37Z","modified":"2026-02-04T02:25:29.782097Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:14951-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-04-27T07:59:50Z","modified":"2026-02-04T03:33:43.302405Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2378-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-27239: Fixed a buffer overflow in the command line ip option (bsc#1197216).\n","status":"published","published":"2022-07-13T08:27:10Z","modified":"2026-02-04T04:20:47.031814Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5459-1","title":"cifs-utils vulnerabilities","description":"Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a\npassword. In certain environments, a local attacker could possibly use this\nissue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-14342)\n\nIt was discovered that cifs-utils incorrectly used host credentials when\nmounting a krb5 CIFS file system from within a container. An attacker\ninside a container could possibly use this issue to obtain access to\nsensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. (CVE-2021-20208)\n\nIt was discovered that cifs-utils incorrectly handled certain command-line\narguments. A local attacker could possibly use this issue to obtain root\nprivileges. (CVE-2022-27239)\n\nIt was discovered that cifs-utils incorrectly handled verbose logging. A\nlocal attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2022-29869)\n","status":"published","published":"2022-06-02T16:41:26Z","modified":"2026-02-10T04:42:38Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-7688-1","title":"cifs-utils vulnerabilities","description":"Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a\npassword. In certain environments, a local attacker could possibly use this\nissue to escalate privileges. (CVE-2020-14342)\n\nIt was discovered that cifs-utils incorrectly used host credentials when\nmounting a krb5 CIFS file system from within a container. An attacker\ninside a container could possibly use this issue to obtain access to\nsensitive information. (CVE-2021-20208)\n\nIt was discovered that cifs-utils incorrectly handled certain command-line\narguments. A local attacker could possibly use this issue to obtain root\nprivileges. (CVE-2022-27239)\n\nIt was discovered that cifs-utils incorrectly handled verbose logging. A\nlocal attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2022-29869)","status":"published","published":"2025-08-07T09:24:31Z","modified":"2026-06-25T13:32:30.715866707Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}