CVE-2022-27239

CVSS V2 High 7.2 CVSS V3 High 7.8
Description
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Overview
  • CVE ID
  • CVE-2022-27239
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-04-27T14:15:09
  • Last Modified Date
  • 2022-10-05T19:37:42
Weakness Enumerations
CWE URL
CWE-787 http://cwe.mitre.org/data/definitions/787.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:* 1 OR 6.15
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:caas_platform:4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:enterprise_storage:6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:enterprise_storage:7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:linux_enterprise_point_of_service:11.0:sp3:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:linux_enterprise_storage:7.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_proxy:4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_proxy:4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_proxy:4.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_retail_branch_server:4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_retail_branch_server:4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_retail_branch_server:4.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_server:4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_server:4.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:manager_server:4.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:openstack_cloud:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:openstack_cloud:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:openstack_cloud_crowbar:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_desktop:15:sp3:*:*:*:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_desktop:15:sp4:*:*:*:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:12.0:sp5:*:*:-:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:-:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:espos:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp1:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:espos:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp2:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp3:*:*:-:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0:sp4:*:*:-:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_micro:5.2:*:*:*:*:-:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_micro:5.2:*:*:*:*:rancher:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:*:*:*:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:business_critical_linux:-:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:sap:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:business_critical_linux:-:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:espos:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:-:sap:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:espos:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:sap:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:-:*:*:espos:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:-:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:business_critical_linux:-:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:sp1:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:business_critical_linux:-:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:ltss:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:sp3:*:*:*:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_server:15:sp4:*:*:*:*:*:* 1 OR
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp5:*:*:*:*:*:* 1 OR
cpe:2.3:a:hp:helion_openstack:8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.2
  • Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 10
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • LOCAL
  • Attack Compatibility
  • LOW
  • Privileges Required
  • LOW
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 7.8
  • Base Severity
  • HIGH
  • Exploitability Score
  • 1.8
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=15025 Issue Tracking Permissions Required Vendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1197216 Issue Tracking Patch Third Party Advisory
https://github.com/piastry/cifs-utils/pull/7 Issue Tracking Patch Third Party Advisory
https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765 Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/ Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/ Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/ Mailing List Third Party Advisory
https://www.debian.org/security/2022/dsa-5157 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-27239
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27239
History
Created Old Value New Value Data Type Notes
2022-05-08 06:06:48 Added to TrackCVE