Bug 2081040 (CVE-2022-27239) - CVE-2022-27239 cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root
Summary: CVE-2022-27239 cifs-utils: stack-based buffer overflow mount.cifs may lead to...
Keywords:
Status: CLOSED WONTFIX
Alias: CVE-2022-27239
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2081041 2082325 2082326 2082327 2082328 2082329 2082330 2082331 2082332 2102812 2102813 2102814
Blocks: 2081042
TreeView+ depends on / blocked
 
Reported: 2022-05-02 15:28 UTC by Marian Rehak
Modified: 2023-09-23 18:24 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2022-09-28 14:06:18 UTC
Embargoed:

Attachments (Terms of Use)

Description Marian Rehak 2022-05-02 15:28:34 UTC 
A stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

References:

http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba
https://bugzilla.samba.org/show_bug.cgi?id=15025
https://bugzilla.suse.com/show_bug.cgi?id=1197216
https://github.com/piastry/cifs-utils/pull/7
https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765
Comment 1 Marian Rehak 2022-05-02 15:28:48 UTC 
Created cifs-utils tracking bugs for this issue:

Affects: fedora-all [bug 2081041]
Comment 2 Alexander Bokovoy 2022-05-02 16:00:09 UTC 

*** This bug has been marked as a duplicate of bug 2080525 ***
Note You need to log in before you can comment on or make changes to this bug.