Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Gentoo Linux | — | Upgrade net-fs/cifs-utils. | Oct 30, 2017 | Mar 31, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cifs-utils | Dec 4, 2019 | Mar 31, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cifs-utils | Dec 18, 2019 | Mar 31, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cifs-utils | Nov 19, 2019 | Mar 31, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub