A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cifs-utils | Mar 26, 2024 | Apr 19, 2021 |
| Debian | — | Upgrade cifs-utils | Jul 30, 2024 | Apr 19, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cifs-utils | Sep 16, 2021 | Apr 19, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cifs-utils | Oct 26, 2021 | Apr 19, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cifs-utils | Sep 7, 2021 | Apr 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cifs-utilsUpgrade pam_cifscreds | Jun 28, 2021 | Apr 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade cifs-utils | Aug 10, 2021 | Apr 19, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 19, 2021 |
| Suse | — | Upgrade cifs-utils-develUpgrade pam_cifscredsUpgrade cifs-utils | Apr 14, 2021 | Apr 13, 2021 |
| Ubuntu | — | Upgrade cifs-utilsUpgrade cifs-utils (Ubuntu Pro) | Jun 4, 2022 | Apr 13, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub