Related Vulnerabilities: CVE-2022-29869  

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Description

The MITRE CVE dictionary describes this issue as:

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Additional Information

  • Bugzilla 2081221: CVE-2022-29869 cifs-utils: crafted input may cause an information leak
  • CWE-20: Improper Input Validation
  • FAQ: Frequently asked questions about CVE-2022-29869