Buffer Overflow Vulnerability in CIFS Utilities for Linux
CVE-2022-27239

7.8HIGH

Key Information:

Vendor

Samba

Status
Cifs-utils
Vendor
CVE Published:
27 April 2022

What is CVE-2022-27239?

A stack-based buffer overflow vulnerability exists in cifs-utils version 6.14 when processing the command-line argument ip= in mount.cifs. This flaw allows local attackers to exploit the buffer overflow and potentially gain root privileges, posing a serious risk to system security. Users are advised to update to the latest version to mitigate this risk and protect against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://bugzilla.suse.com/show_bug.cgi?id=1197216
http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba
https://github.com/piastry/cifs-utils/pull/7/commits/955f...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.