Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.001
EPSS Ranking
29.3%
CVSS Severity
CVSS v3 Score
7.8
CVSS v2 Score
7.2
References
http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba
https://bugzilla.samba.org/show_bug.cgi?id=15025
https://bugzilla.suse.com/show_bug.cgi?id=1197216
https://github.com/piastry/cifs-utils/pull/7
https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765
https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/
https://security.gentoo.org/glsa/202311-05
https://www.debian.org/security/2022/dsa-5157
http://wiki.robotz.com/index.php/Linux_CIFS_Utils_and_Samba
https://bugzilla.samba.org/show_bug.cgi?id=15025
https://bugzilla.suse.com/show_bug.cgi?id=1197216
https://github.com/piastry/cifs-utils/pull/7
https://github.com/piastry/cifs-utils/pull/7/commits/955fb147e97a6a74e1aaa65766de91e2c1479765
https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/
https://security.gentoo.org/glsa/202311-05
https://www.debian.org/security/2022/dsa-5157
Products affected by CVE-2022-27239
Hp
»
Helion Openstack
»
Version:
8.0
cpe:2.3:a:hp:helion_openstack:8.0
Samba
»
Cifs-Utils
»
Version:
4.0
cpe:2.3:a:samba:cifs-utils:4.0
Samba
»
Cifs-Utils
»
Version:
5.6
cpe:2.3:a:samba:cifs-utils:5.6
Samba
»
Cifs-Utils
»
Version:
5.7
cpe:2.3:a:samba:cifs-utils:5.7
Samba
»
Cifs-Utils
»
Version:
5.8
cpe:2.3:a:samba:cifs-utils:5.8
Samba
»
Cifs-Utils
»
Version:
5.9
cpe:2.3:a:samba:cifs-utils:5.9
Samba
»
Cifs-Utils
»
Version:
6.0
cpe:2.3:a:samba:cifs-utils:6.0
Samba
»
Cifs-Utils
»
Version:
6.1
cpe:2.3:a:samba:cifs-utils:6.1
Samba
»
Cifs-Utils
»
Version:
6.10
cpe:2.3:a:samba:cifs-utils:6.10
Samba
»
Cifs-Utils
»
Version:
6.13
cpe:2.3:a:samba:cifs-utils:6.13
Samba
»
Cifs-Utils
»
Version:
6.14
cpe:2.3:a:samba:cifs-utils:6.14
Samba
»
Cifs-Utils
»
Version:
6.2
cpe:2.3:a:samba:cifs-utils:6.2
Samba
»
Cifs-Utils
»
Version:
6.3
cpe:2.3:a:samba:cifs-utils:6.3
Samba
»
Cifs-Utils
»
Version:
6.4
cpe:2.3:a:samba:cifs-utils:6.4
Samba
»
Cifs-Utils
»
Version:
6.5
cpe:2.3:a:samba:cifs-utils:6.5
Samba
»
Cifs-Utils
»
Version:
6.6
cpe:2.3:a:samba:cifs-utils:6.6
Samba
»
Cifs-Utils
»
Version:
6.7
cpe:2.3:a:samba:cifs-utils:6.7
Samba
»
Cifs-Utils
»
Version:
6.8
cpe:2.3:a:samba:cifs-utils:6.8
Samba
»
Cifs-Utils
»
Version:
6.9
cpe:2.3:a:samba:cifs-utils:6.9
Suse
»
Caas Platform
»
Version:
4.0
cpe:2.3:a:suse:caas_platform:4.0
Suse
»
Enterprise Storage
»
Version:
6.0
cpe:2.3:a:suse:enterprise_storage:6.0
Suse
»
Enterprise Storage
»
Version:
7.0
cpe:2.3:a:suse:enterprise_storage:7.0
Suse
»
Linux Enterprise Point Of Service
»
Version:
11.0
cpe:2.3:a:suse:linux_enterprise_point_of_service:11.0
Suse
»
Linux Enterprise Storage
»
Version:
7.1
cpe:2.3:a:suse:linux_enterprise_storage:7.1
Suse
»
Manager Proxy
»
Version:
4.1
cpe:2.3:a:suse:manager_proxy:4.1
Suse
»
Manager Proxy
»
Version:
4.2
cpe:2.3:a:suse:manager_proxy:4.2
Suse
»
Manager Proxy
»
Version:
4.3
cpe:2.3:a:suse:manager_proxy:4.3
Suse
»
Manager Retail Branch Server
»
Version:
4.1
cpe:2.3:a:suse:manager_retail_branch_server:4.1
Suse
»
Manager Retail Branch Server
»
Version:
4.2
cpe:2.3:a:suse:manager_retail_branch_server:4.2
Suse
»
Manager Retail Branch Server
»
Version:
4.3
cpe:2.3:a:suse:manager_retail_branch_server:4.3
Suse
»
Manager Server
»
Version:
4.1
cpe:2.3:a:suse:manager_server:4.1
Suse
»
Manager Server
»
Version:
4.2
cpe:2.3:a:suse:manager_server:4.2
Suse
»
Manager Server
»
Version:
4.3
cpe:2.3:a:suse:manager_server:4.3
Suse
»
Openstack Cloud
»
Version:
8.0
cpe:2.3:a:suse:openstack_cloud:8.0
Suse
»
Openstack Cloud
»
Version:
9.0
cpe:2.3:a:suse:openstack_cloud:9.0
Suse
»
Openstack Cloud Crowbar
»
Version:
8.0
cpe:2.3:a:suse:openstack_cloud_crowbar:8.0
Suse
»
Openstack Cloud Crowbar
»
Version:
9.0
cpe:2.3:a:suse:openstack_cloud_crowbar:9.0
Debian
»
Debian Linux
»
Version:
10.0
cpe:2.3:o:debian:debian_linux:10.0
Debian
»
Debian Linux
»
Version:
11.0
cpe:2.3:o:debian:debian_linux:11.0
Debian
»
Debian Linux
»
Version:
9.0
cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject
»
Fedora
»
Version:
34
cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject
»
Fedora
»
Version:
35
cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject
»
Fedora
»
Version:
36
cpe:2.3:o:fedoraproject:fedora:36
Suse
»
Linux Enterprise Desktop
»
Version:
15
cpe:2.3:o:suse:linux_enterprise_desktop:15
Suse
»
Linux Enterprise High Performance Computing
»
Version:
12.0
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:12.0
Suse
»
Linux Enterprise High Performance Computing
»
Version:
15.0
cpe:2.3:o:suse:linux_enterprise_high_performance_computing:15.0
Suse
»
Linux Enterprise Micro
»
Version:
5.2
cpe:2.3:o:suse:linux_enterprise_micro:5.2
Suse
»
Linux Enterprise Real Time
»
Version:
15.0
cpe:2.3:o:suse:linux_enterprise_real_time:15.0
Suse
»
Linux Enterprise Server
»
Version:
11
cpe:2.3:o:suse:linux_enterprise_server:11
Suse
»
Linux Enterprise Server
»
Version:
12
cpe:2.3:o:suse:linux_enterprise_server:12
Suse
»
Linux Enterprise Server
»
Version:
15
cpe:2.3:o:suse:linux_enterprise_server:15
Suse
»
Linux Enterprise Software Development Kit
»
Version:
12
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved