CVE:CVE-2022-27239
CNNVD:CNNVD-202204-4460
cifs-utils是Pavel Shilovsky个人开发者的一个工具包。提供用于管理 CIFS 网络文件系统安装的实用程序。
piastry cifs-utils 6.14之前版本存在安全漏洞，该漏洞源于应用在解析 mount.cifs ip=命令行参数时存在基于堆栈的缓冲区溢出。本地攻击者利用该漏洞可以获得root权限。
solution:Upgrade samba cifs-utils to a higher version than 6.15,and avoid the version (,6.15); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade suse caas_platform to a higher version than 4.0,and avoid the version 4.0; Upgrade suse enterprise_storage to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade suse linux_enterprise_point_of_service to a higher version than 11.0:sp3,and avoid the version 11.0:sp3; Upgrade suse linux_enterprise_storage to a higher version than 7.1,and avoid the version 7.1; Upgrade suse manager_proxy to a higher version than 4.1,4.2,4.3,and avoid the version 4.1,4.2,4.3; Upgrade suse manager_retail_branch_server to a higher version than 4.1,4.2,4.3,and avoid the version 4.1,4.2,4.3; Upgrade suse manager_server to a higher version than 4.1,4.2,4.3,and avoid the version 4.1,4.2,4.3; Upgrade suse openstack_cloud to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade suse openstack_cloud_crowbar to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade suse linux_enterprise_desktop to a higher version than 15:sp3,15:sp4,and avoid the version 15:sp3,15:sp4; Upgrade suse linux_enterprise_high_performance_computing to a higher version than 12.0:sp5,15.0,15.0:sp1,15.0:sp2,15.0:sp3,15.0:sp4,and avoid the version 12.0:sp5,15.0,15.0:sp1,15.0:sp2,15.0:sp3,15.0:sp4; Upgrade suse linux_enterprise_micro to a higher version than 5.2,and avoid the version 5.2; Upgrade suse linux_enterprise_real_time to a higher version than 15.0:sp2,and avoid the version 15.0:sp2; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,11:sp4,12:sp2,12:sp3,12:sp4,12:sp5,15,15:sp1,15:sp2,15:sp3,15:sp4,and avoid the version 11:sp3,11:sp4,12:sp2,12:sp3,12:sp4,12:sp5,15,15:sp1,15:sp2,15:sp3,15:sp4; Upgrade suse linux_enterprise_software_development_kit to a higher version than 12:sp5,and avoid the version 12:sp5; Upgrade hp helion_openstack to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36