Alpine/cifs-utils: high 7
It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special p
Action: Upgrade cifs-utils to 6.11-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.6 | 6.11-r0 | - |
Fixed versions
| 6.11-r0 |
Sources
- osv: ALPINE-CVE-2020-14342#Alpine:v3.13/cifs-utils
- https://security.alpinelinux.org/vuln/CVE-2020-14342
published · modified · JSON