CVE-2018-14722
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in...
CVE-2018-14722 is a high vulnerability (CVSS 8.1) in Btrfsmaintenance Project Btrfsmaintenance, published August 15, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.99%, the 87th percentile. Fixed in btrfsmaintenance 0.4.1-2.
- Severity
- 8.1 HighCVSS 3.0, NVD
- Exploit chance
- 2.99%EPSS, 87th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.4.1-2btrfsmaintenance +9 more
Description
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
btrfsmaintenanceDebian:12 | before 0.4.1-2 | 0.4.1-2 |
btrfsmaintenanceDebian:13 | before 0.4.1-2 | 0.4.1-2 |
btrfsmaintenanceDebian:14 | before 0.4.1-2 | 0.4.1-2 |
btrfsmaintenanceUbuntu:20.04:LTS | All versions, plus listed versions 0.4.2-1 | None known |
btrfsmaintenanceUbuntu:22.04:LTS | All versions, plus listed versions 0.5-1 | None known |
btrfsmaintenanceUbuntu:24.04:LTS | All versions, plus listed versions 0.5-5 | None known |
btrfsmaintenanceUbuntu:25.10 | All versions, plus listed versions 0.5.2-1 | None known |
btrfsmaintenanceUbuntu:26.10 | All versions, plus listed versions 0.5.2-1build1 | None known |
btrfsmaintenanceUbuntu:26.04:LTS | All versions, plus listed versions 0.5.2-10.5.2-1build1 | None known |
btrfsmaintenanceopenSUSE:Tumbleweed | before 0.5-2.5 | 0.5-2.5 |
What each source reports
NVD Score used
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
CVE-2018-14722- Updated
- 2026-11-02
EUVDEUVD-2018-6611No score
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
EUVD-2018-6611- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gvph-5529-3vhw
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in...
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
GHSA-gvph-5529-3vhw- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-14722
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
DEBIAN-CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-14722
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
UBUNTU-CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10662-1No score
btrfsmaintenance-0.5-2.5 on GA media
These are all security issues fixed in the btrfsmaintenance-0.5-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10662-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.