mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error message.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cifs-utils | Sep 20, 2017 | Aug 27, 2012 |
| Centos_linux | — | Upgrade cifs-utils | Dec 1, 2016 | Aug 27, 2012 |
| Debian | — | Upgrade cifs-utils | Jul 30, 2024 | Aug 27, 2012 |
| Oracle_linux | — | Upgrade cifs-utils | Oct 16, 2024 | Aug 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2012 |
| Suse | — | Upgrade pam_cifscredsUpgrade wb-cifs-idmap-pluginUpgrade cifs-utils-develUpgrade cifs-utils | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub