Published: 09/09/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4

CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1

VMScore: 392

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

It exists that cifs-utils incorrectly handled certain command-line arguments. A local attacker could possibly use this issue to obtain root privileges. (CVE-2022-27239)

Vulnerable Product	Search on Vulmon	Subscribe to Product
samba cifs-utils
fedoraproject fedora 32
fedoraproject fedora 33
opensuse leap 15.1

Debian Bug report logs - #970172 cifs-utils: CVE-2020-14342: Shell command injection vulnerability in mountcifs Package: src:cifs-utils; Maintainer for src:cifs-utils is Debian Samba Maintainers <pkg-samba-maint@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 12 Sep 2020 13: ...

Several security issues were fixed in cifs-utils ...

CWE-78 https://lists.samba.org/archive/samba-technical/2020-September/135747.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14342 https://security.gentoo.org/glsa/202009-16 http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00109.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DUMRICFXJVCBBOSKZSKT3HFVQM6VPJU3/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBNFSTJOQWVPFZAUJNNMAPY45PW5RTTE/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=970172 https://ubuntu.com/security/notices/USN-5459-1 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-14342

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect