CVE-2022-27239

Katalog CVE

CVSS 7.8 · High EPSS 0,58%

Kerentanan Out-of-bounds Write pada samba cifs-utils, debian linux +17 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

Rincian

Terbit di NVD

27 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 45,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.samba.org/show_bug.cgi?id=15025 issue tracking · permissions required · advisory vendor
• https://bugzilla.suse.com/show_bug.cgi?id=1197216 issue tracking · patch · advisory pihak ketiga
• https://github.com/piastry/cifs-utils/pull/7 issue tracking · patch · advisory pihak ketiga
• https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765 patch · advisory pihak ketiga
• http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5157 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJIL...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3T...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ...
• https://security.gentoo.org/glsa/202311-05