https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:53:28 +0000 https://vulnerability.circl.lu/vuln/cve-2020-14342 <p><strong>Affected:</strong> samba cifs-utils</p> <p>It was found that cifs-utils&#39; mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.</p> <p><strong>Affected:</strong> samba cifs-utils</p> <p>It was found that cifs-utils&#39; mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.</p> https://vulnerability.circl.lu/vuln/cve-2020-14342 https://vulnerability.circl.lu/vuln/usn-5459-1 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: cifs-utils, Ubuntu:20.04:LTS: cifs-utils, Ubuntu:22.04:LTS: cifs-utils</p> <p>Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14342)</p> <p>It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system from within a container. An attacker inside a container could possibly use this issue to obtain access to sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-20208)</p> <p>It was discovered that cifs-utils incorrectly handled certain command-line arguments. A local attacker could possibly use this issue to obtain root privileges. (CVE-2022-27239)</p> <p>It was discovered that cifs-utils incorrectly handled verbose logging. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2022-29869)</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: cifs-utils, Ubuntu:20.04:LTS: cifs-utils, Ubuntu:22.04:LTS: cifs-utils</p> <p>Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14342)</p> <p>It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system from within a container. An attacker inside a container could possibly use this issue to obtain access to sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-20208)</p> <p>It was discovered that cifs-utils incorrectly handled certain command-line arguments. A local attacker could possibly use this issue to obtain root privileges. (CVE-2022-27239)</p> <p>It was discovered that cifs-utils incorrectly handled verbose logging. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2022-29869)</p> https://vulnerability.circl.lu/vuln/usn-5459-1