A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root     (CVE-2022-27239)

  - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which     could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission,     such as via sudo rules, could use this flaw to escalate their privileges. (CVE-2020-14342)

  - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is     to data confidentiality and integrity. (CVE-2021-20208)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is     to data confidentiality and integrity. (CVE-2021-20208)

  - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line     argument could lead to local attackers gaining root privileges. (CVE-2022-27239)

  - cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal     sign) characters but is not a valid credentials file. (CVE-2022-29869)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5459-1 advisory.

    Aurlien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain     environments, a local attacker could possibly use this issue to escalate privileges. This issue only     affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-14342)

    It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system     from within a container. An attacker inside a container could possibly use this issue to obtain access to     sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-20208)

    It was discovered that cifs-utils incorrectly handled certain command-line arguments. A local attacker     could possibly use this issue to obtain root privileges. (CVE-2022-27239)

    It was discovered that cifs-utils incorrectly handled verbose logging. A local attacker could possibly use     this issue to obtain sensitive information. (CVE-2022-29869)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is     to data confidentiality and integrity. (CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is     to data confidentiality and integrity. (CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in cifs-utils. A user when mounting a     krb5 CIFS file system from within a container can use     Kerberos credentials of the host. The highest threat     from this vulnerability is to data confidentiality and     integrity.(CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in cifs-utils in versions before 6.13.
    A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the     host. The highest threat from this vulnerability is to     data confidentiality and integrity.(CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A flaw was found in cifs-utils in versions before 6.13.
    A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the     host. The highest threat from this vulnerability is to     data confidentiality and integrity.(CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - A flaw was found in cifs-utils in versions before 6.13.
    A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the     host. The highest threat from this vulnerability is to     data confidentiality and integrity.(CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the cifs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was found in cifs-utils in versions before 6.13.
    A user when mounting a krb5 CIFS file system from     within a container can use Kerberos credentials of the     host. The highest threat from this vulnerability is to     data confidentiality and integrity.(CVE-2021-20208)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the cifs package has been released.

This update for cifs-utils fixes the following security issues :

  - CVE-2021-20208: Fixed a potential kerberos auth leak     escaping from container. (bsc#1183239)

  - CVE-2020-14342: Fixed a shell command injection     vulnerability in mount.cifs. (bsc#1174477)

This update for cifs-utils fixes the following issues :

  - Solve invalid directory mounting. When attempting to     change the current working directory into non-existing     directories, mount.cifs crashes. (bsc#1152930)

  - Fixed a bug where it was no longer possible to mount     CIFS filesystem after the last maintenance update.
    (bsc#1184815)

This update was imported from the SUSE:SLE-15:Update update project.

This update for cifs-utils fixes the following security issues :

CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. (bsc#1183239)

CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. (bsc#1174477)

This update for cifs-utils fixes the following issues :

Solve invalid directory mounting. When attempting to change the current working directory into non-existing directories, mount.cifs crashes. (bsc#1152930)

Fixed a bug where it was no longer possible to mount CIFS filesystem after the last maintenance update. (bsc#1184815)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for cifs-utils fixes the following issues :

CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container (bsc#1183239)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199659	RHEL 7 : cifs-utils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196764	RHEL 6 : cifs-utils (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
170786	EulerOS Virtualization 3.0.2.2 : cifs-utils (EulerOS-SA-2023-1247)	Nessus	Huawei Local Security Checks	high
161789	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : cifs-utils vulnerabilities (USN-5459-1)	Nessus	Ubuntu Local Security Checks	high
158001	EulerOS Virtualization 3.0.6.6 : cifs-utils (EulerOS-SA-2022-1113)	Nessus	Huawei Local Security Checks	medium
156525	EulerOS Virtualization 3.0.2.6 : cifs-utils (EulerOS-SA-2021-2901)	Nessus	Huawei Local Security Checks	medium
154363	EulerOS 2.0 SP3 : cifs-utils (EulerOS-SA-2021-2575)	Nessus	Huawei Local Security Checks	medium
153313	EulerOS 2.0 SP2 : cifs-utils (EulerOS-SA-2021-2359)	Nessus	Huawei Local Security Checks	medium
153084	EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2021-2323)	Nessus	Huawei Local Security Checks	medium
152343	EulerOS 2.0 SP9 : cifs-utils (EulerOS-SA-2021-2237)	Nessus	Huawei Local Security Checks	medium
152276	EulerOS 2.0 SP9 : cifs-utils (EulerOS-SA-2021-2263)	Nessus	Huawei Local Security Checks	medium
151539	EulerOS Virtualization 2.9.0 : cifs-utils (EulerOS-SA-2021-2207)	Nessus	Huawei Local Security Checks	medium
151533	EulerOS Virtualization 2.9.1 : cifs-utils (EulerOS-SA-2021-2191)	Nessus	Huawei Local Security Checks	medium
151305	EulerOS Virtualization for ARM 64 3.0.2.0 : cifs-utils (EulerOS-SA-2021-2115)	Nessus	Huawei Local Security Checks	medium
151164	EulerOS Virtualization for ARM 64 3.0.6.0 : cifs-utils (EulerOS-SA-2021-2021)	Nessus	Huawei Local Security Checks	medium
151052	EulerOS 2.0 SP8 : cifs-utils (EulerOS-SA-2021-1978)	Nessus	Huawei Local Security Checks	medium
149952	Photon OS 4.0: Cifs PHSA-2021-4.0-0030	Nessus	PhotonOS Local Security Checks	medium
149919	Photon OS 1.0: Cifs PHSA-2021-1.0-0390	Nessus	PhotonOS Local Security Checks	medium
149838	Photon OS 2.0: Cifs PHSA-2021-2.0-0344	Nessus	PhotonOS Local Security Checks	medium
149829	Photon OS 3.0: Cifs PHSA-2021-3.0-0236	Nessus	PhotonOS Local Security Checks	medium
149598	openSUSE Security Update : cifs-utils (openSUSE-2021-639)	Nessus	SuSE Local Security Checks	high
149224	SUSE SLES15 Security Update : cifs-utils (SUSE-SU-2021:1455-1)	Nessus	SuSE Local Security Checks	high
148515	SUSE SLES12 Security Update : cifs-utils (SUSE-SU-2021:1159-1)	Nessus	SuSE Local Security Checks	medium
148507	SUSE SLED15 / SLES15 Security Update : cifs-utils (SUSE-SU-2021:1161-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2021-20208

medium

Tenable Plugins

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high

medium

medium