https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T10:58:16.098844+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-27239 CVE-2022-27239 2026-10-06T10:58:16.102169+00:00

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

 https://vulnerability.circl.lu/vuln/usn-5459-1 USN-5459-1 — cifs-utils vulnerabilities 2026-10-06T10:58:16.102290+00:00

Affected: Ubuntu:18.04:LTS: cifs-utils, Ubuntu:20.04:LTS: cifs-utils, Ubuntu:22.04:LTS: cifs-utils

Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14342)

It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system from within a container. An attacker inside a container could possibly use this issue to obtain access to sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-20208)

It was discovered that cifs-utils incorrectly handled certain command-line arguments. A local attacker could possibly use this issue to obtain root privileges. (CVE-2022-27239)

It was discovered that cifs-utils incorrectly handled verbose logging. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2022-29869)