CVE-2022-27239

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining...

Original description

The description as published by the source.

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2022-27239 cifs-utils Fixed in: 6.15-r0
Debian DEBIAN-CVE-2022-27239 cifs-utils Fixed in: 2:6.11-3.1+deb11u1

References

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
advisory security.gentoo.org
advisory debian.org
patch github.com
report bugzilla.samba.org
report bugzilla.suse.com
web wiki.robotz.com
web github.com
web lists.debian.org