{"id":"CVE-2022-29869","aliases":["ALPINE-CVE-2022-29869","AZL-9588","CLSA-2026-1778015406","DEBIAN-CVE-2022-29869","DLA-3009-1","DSA-5157-1","EUVD-2022-34181","GHSA-pwjc-pm2q-cpg2","MGASA-2022-0170","OESA-2022-1626","SUSE-SU-2022:2801-1","SUSE-SU-2022:2802-1","SUSE-SU-2022:3525-1","UBUNTU-CVE-2022-29869","USN-5459-1","USN-7688-1","openSUSE-SU-2022:2801-1"],"status":"published","title":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01918,"percentile":0.80058,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-532","CWE-668"],"published":"2022-04-28T00:00:00Z","modified":"2026-11-03T07:18:33Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cifs-utils","fixed_in":["6.15-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cifs-utils","fixed_in":["6.14-2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"cifs-utils","fixed_in":["6.2-10.el7.0.5.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"cifs-utils-devel","fixed_in":["6.2-10.el7.0.5.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cifs-utils","fixed_in":["2:6.14-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cifs-utils","fixed_in":["2:6.14-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cifs-utils","fixed_in":["2:6.14-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"cifs-utils","fixed_in":["6.9-150100.5.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"cifs-utils","fixed_in":["6.9-150100.5.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"cifs-utils","fixed_in":["6.9-150100.5.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cifs-utils","fixed_in":["6.9-13.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"cifs-utils","fixed_in":["6.15-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"cifs-utils","fixed_in":["6.15-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"cifs-utils","fixed_in":["6.15-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","fixed_in":["2:6.0-1ubuntu2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","fixed_in":["2:6.4-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","fixed_in":["2:6.8-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","fixed_in":["2:6.9-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","fixed_in":["2:6.14-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"cifs-utils","fixed_in":["6.9-150100.5.18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.el7.0.5.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"cifs-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2-10.el7.0.5.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.7-1+deb9u1"}]}],"versions":["2:6.7-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-2+deb10u1"}]}],"versions":["2:6.8-2"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.11-3.1+deb11u1"}]}],"versions":["2:6.11-3.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11-2.2.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-5.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10-5.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.14-3.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-13.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.15-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0-1ubuntu2+esm1"}]}],"versions":["2:6.0-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.4-1ubuntu1.1+esm1"}]}],"versions":["2:6.4-1ubuntu1","2:6.4-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-1ubuntu1.2"}]}],"versions":["2:6.7-1","2:6.8-1","2:6.8-1ubuntu1","2:6.8-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.9-1ubuntu0.2"}]}],"versions":["2:6.9-0ubuntu1","2:6.9-1","2:6.9-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1ubuntu0.1"}]}],"versions":["2:6.11-3.1","2:6.14-1","2:6.14-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.8-1ubuntu1.2"}]}],"versions":["2:6.7-1","2:6.8-1","2:6.8-1ubuntu1","2:6.8-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.9-1ubuntu0.2"}]}],"versions":["2:6.9-0ubuntu1","2:6.9-1","2:6.9-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.14-1ubuntu0.1"}]}],"versions":["2:6.11-3.1","2:6.14-1","2:6.14-1build1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0-1ubuntu2+esm1"}]}],"versions":["2:6.0-1ubuntu2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.4-1ubuntu1.1+esm1"}]}],"versions":["2:6.4-1ubuntu1","2:6.4-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9-150100.5.18.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"samba","product":"cifs-utils"}],"references":[{"url":"https://github.com/piastry/cifs-utils/pull/7","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5157","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202311-05","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29869","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/"},{"url":"https://github.com/advisories/GHSA-pwjc-pm2q-cpg2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-29869","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778015406.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29869.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-29869","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0170.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30360","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/04/27/5","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QMGM2N6RR7GOZR7OP37QJTCTTLTTIWUN/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1626","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27239","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222801-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198976","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29869","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222802-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223525-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-29869","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5459-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29869","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7688-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14342","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27239","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/744TDSJVWGHR6LCEL64KSZ6F4ZOIZJQP/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-29869","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T00:00:00Z","modified":"2024-08-03T06:33:42.941Z","updated_at":"2026-11-02T14:34:35.945659Z"}],"euvd":[{"id":"EUVD-2022-34181","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T00:00:00Z","modified":"2024-08-03T06:33:42Z","updated_at":"2026-11-03T03:25:37.579336Z"}],"ghsa":[{"id":"GHSA-pwjc-pm2q-cpg2","title":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-29T00:00:26Z","modified":"2023-12-03T05:04:37Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-532","CWE-668"],"updated_at":"2026-11-02T14:55:08.580325Z"}],"nvd":[{"id":"CVE-2022-29869","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T01:15:06.727Z","modified":"2026-06-17T04:40:51.803Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"ALPINE-CVE-2022-29869","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T01:15:06.727Z","modified":"2026-11-03T07:18:33.157335521Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9588","title":"CVE-2022-29869 affecting package cifs-utils for versions less than 6.14-2","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T01:15:06Z","modified":"2026-04-21T04:35:04.505266Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:12.028669Z"},{"id":"OESA-2022-1626","title":"cifs-utils security update","description":"The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. The in-kernel CIFS filesystem relies on a set of user-space tools. That package of tools is called cifs-utils.Although not really part of Samba proper, these tools were originally part of the Samba package. For several reasons, shipping these tools as part of Samba was problematic and it was deemed better to split them off into their own package.\r\n\r\nSecurity Fix(es):\r\n\r\ncifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.(CVE-2022-29869)\n\nIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.(CVE-2022-27239)","status":"published","published":"2022-05-11T11:04:54Z","modified":"2026-08-18T01:16:32.082272984Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-29869","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T01:15:00Z","modified":"2026-02-04T03:45:10.535274Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CLSA-2026-1778015406","title":"cifs-utils: Fix of CVE-2022-29869","description":"- CVE-2022-29869: avoid leaking sensitive credential file content via\n  verbose stderr in mount.cifs option parsing","status":"published","published":"2026-05-05T21:10:11Z","modified":"2026-06-01T00:33:18.773368207Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CVE-2022-29869","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T00:00:00Z","modified":"2026-10-28T10:28:17.086712946Z","updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"DEBIAN-CVE-2022-29869","description":"cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.","status":"published","published":"2022-04-28T01:15:06.727Z","modified":"2026-11-03T06:02:30.096114307Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"DLA-3009-1","title":"cifs-utils - security update","status":"published","published":"2022-05-16T00:00:00Z","modified":"2026-03-09T01:19:11.352864Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5157-1","title":"cifs-utils - security update","status":"published","published":"2022-06-03T00:00:00Z","modified":"2026-03-09T02:08:59.81349Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0170","title":"Updated cifs-utils packages fix security vulnerability","description":"In cifs-utils through 6.14, a stack-based buffer overflow when parsing the\nmount.cifs ip= command-line argument could lead to local attackers gaining\nroot privileges. (CVE-2022-27239)\n\ncifs-utils through 6.14, with verbose logging, can cause an information\nleak when a file contains = (equal sign) characters but is not a valid\ncredentials file. (CVE-2022-29869)\n","status":"published","published":"2022-05-12T10:24:45Z","modified":"2026-04-16T04:42:51.342009916Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:2801-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-29869: Fixed verbose messages on option parsing causing information leak (bsc#1198976).\n","status":"published","published":"2022-08-12T14:28:36Z","modified":"2026-02-04T03:22:45.686438Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"SUSE-SU-2022:2801-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-29869: Fixed verbose messages on option parsing causing information leak (bsc#1198976).\n","status":"published","published":"2022-08-12T14:28:29Z","modified":"2026-02-04T04:40:46.812428Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2802-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- CVE-2022-29869: Fixed verbose messages on option parsing causing information leak (bsc#1198976).\n","status":"published","published":"2022-08-12T14:29:10Z","modified":"2026-02-04T02:50:39.972873Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3525-1","title":"Security update for cifs-utils","description":"This update for cifs-utils fixes the following issues:\n\n- Fix changelog to include Bugzilla and CVE tracker id numbers missing from previous update\n","status":"published","published":"2022-10-05T10:17:25Z","modified":"2025-05-02T04:33:08.400646Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5459-1","title":"cifs-utils vulnerabilities","description":"Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a\npassword. In certain environments, a local attacker could possibly use this\nissue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-14342)\n\nIt was discovered that cifs-utils incorrectly used host credentials when\nmounting a krb5 CIFS file system from within a container. An attacker\ninside a container could possibly use this issue to obtain access to\nsensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu\n20.04 LTS. (CVE-2021-20208)\n\nIt was discovered that cifs-utils incorrectly handled certain command-line\narguments. A local attacker could possibly use this issue to obtain root\nprivileges. (CVE-2022-27239)\n\nIt was discovered that cifs-utils incorrectly handled verbose logging. A\nlocal attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2022-29869)\n","status":"published","published":"2022-06-02T16:41:26Z","modified":"2026-02-10T04:42:38Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-7688-1","title":"cifs-utils vulnerabilities","description":"Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a\npassword. In certain environments, a local attacker could possibly use this\nissue to escalate privileges. (CVE-2020-14342)\n\nIt was discovered that cifs-utils incorrectly used host credentials when\nmounting a krb5 CIFS file system from within a container. An attacker\ninside a container could possibly use this issue to obtain access to\nsensitive information. (CVE-2021-20208)\n\nIt was discovered that cifs-utils incorrectly handled certain command-line\narguments. A local attacker could possibly use this issue to obtain root\nprivileges. (CVE-2022-27239)\n\nIt was discovered that cifs-utils incorrectly handled verbose logging. A\nlocal attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2022-29869)","status":"published","published":"2025-08-07T09:24:31Z","modified":"2026-06-25T13:32:30.715866707Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}