NetSight
IP …
high7.8

CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root priv…

Impact

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

Affected products

VendorProductAffected versions
SambaCifs-Utils
before 6.15
DebianDebian Linux
Versions 9.0, 10.0, 11.0
SuseCaas Platform
Version 4.0
SuseEnterprise Storage
Versions 6.0, 7.0
SuseLinux Enterprise Point Of Service
Version 11.0
SuseLinux Enterprise Storage
Version 7.1
SuseManager Proxy
Versions 4.1, 4.2, 4.3
SuseManager Retail Branch Server
Versions 4.1, 4.2, 4.3
SuseManager Server
Versions 4.1, 4.2, 4.3
SuseOpenstack Cloud
Versions 8.0, 9.0
SuseOpenstack Cloud Crowbar
Versions 8.0, 9.0
SuseLinux Enterprise Desktop
Version 15

Weakness classification

CWE-787

References