Home

CVE-2022-27239

Description

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.069

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2022:1429-1(SUSE Linux Enterprise Server 12-SP5 ) cifs-utils-6.9-13.20.1.x86_64.rpmLinux
SUSE-SU-2022:1429-1(SUSE Linux Enterprise Server 12-SP5 ) cifs-utils-debuginfo-6.9-13.20.1.x86_64.rpmLinux
SUSE-SU-2022:1429-1(SUSE Linux Enterprise Server 12-SP5 ) cifs-utils-debugsource-6.9-13.20.1.x86_64.rpmLinux
cifs-utils security update(DSA-5157-1) cifs-utils_6.8-2+deb10u1_i386.debLinux
cifs-utils security update(DSA-5157-1) cifs-utils_6.8-2+deb10u1_amd64.debLinux
cifs-utils security update(DSA-5157-1) cifs-utils_6.11-3.1+deb11u1_amd64.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.8-1ubuntu1.2_i386.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.8-1ubuntu1.2_amd64.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.9-1ubuntu0.2_amd64.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.14-1ubuntu0.1_i386.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.14-1ubuntu0.1_amd64.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.11-3.1ubuntu0.1_i386.debLinux
Common Internet File System utilities (USN-5459-1) cifs-utils_6.11-3.1ubuntu0.1_amd64.debLinux
cifs-utils security update(DSA-5157-1) cifs-utils_6.11-3.1+deb11u1_i386.debLinux
cifs-utils security update(DSA-5157-1) cifs-utils_6.11-3.1+deb11u2_i386.debLinux
cifs-utils security update(DSA-5157-1) cifs-utils_6.11-3.1+deb11u2_amd64.debLinux
cifs-utils Security Update (ALAS-2023-1977) cifs-utils-6.2-10.amzn2.0.4.x86_64.rpmLinux
cifs-utils Security Update (ALAS-2023-1977) cifs-utils-devel-6.2-10.amzn2.0.4.x86_64.rpmLinux
cifs-utils Security Update (ALAS-2024-530) cifs-utils-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS-2024-530) pam_cifscreds-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS-2024-530) cifs-utils-info-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS-2024-530) cifs-utils-devel-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS2-2023-1977) cifs-utils-6.2-10.amzn2.0.4.x86_64.rpmLinux
cifs-utils Security Update (ALAS2-2023-1977) cifs-utils-devel-6.2-10.amzn2.0.4.x86_64.rpmLinux
cifs-utils Security Update (ALAS2023-2024-530) pam_cifscreds-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS2023-2024-530) cifs-utils-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS2023-2024-530) cifs-utils-devel-6.15-1.amzn2023.0.2.x86_64.rpmLinux
cifs-utils Security Update (ALAS2023-2024-530) cifs-utils-info-6.15-1.amzn2023.0.2.x86_64.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2022-27239)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234