ALPINE-CVE-2022-29869
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
- Обновитесь до 6.15-r0
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости cifs-utils
За последние 30 дней в cifs-utils опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 3
ALPINE-CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
- Обновитесь до 6.15-r0
Опубликовано ОбновленоALPINE-CVE-2021-20208
A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.
- Обновитесь до 6.13-r0
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.