Debian Cifs-Utils vulnerabilities

2 known vulnerabilities affecting debian/cifs-utils.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1LOW1

Vulnerabilities

Page 1 of 1

CVE-2014-2830CRITICALCVSS 10.0≤ 6.32015-03-31

CVE-2014-2830 [CRITICAL] CWE-119 CVE-2014-2830: Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cif Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.

CVE-2012-1586LOWCVSS 2.1PoCv2.62012-08-27

CVE-2012-1586 [LOW] CWE-200 CVE-2012-1586: mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or dir mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.