CVE-2020-14342

Related Files

Ubuntu Security Notice USN-5459-1

Posted Jun 3, 2022

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5459-1 - Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. It was discovered that cifs-utils incorrectly used host credentials when mounting a krb5 CIFS file system from within a container. An attacker inside a container could possibly use this issue to obtain access to sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

tags | advisory, shell, local

systems | linux, ubuntu

advisories | CVE-2020-14342, CVE-2021-20208, CVE-2022-27239, CVE-2022-29869

SHA-256 | 2742ad8c53c8d4078d2663f3a6a291fda0c5b7a8aaddb41246e402f6bb7d11f1

Download | Favorite | View

Gentoo Linux Security Advisory 202009-16

Posted Sep 30, 2020

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202009-16 - A vulnerability in LinuxCIFS may allow a remote code execution via a command line option. Versions less than 6.11 are affected.

tags | advisory, remote, code execution

systems | linux, gentoo

advisories | CVE-2020-14342

SHA-256 | 7b8e90df6f8f32c41dd68fd0e8ffa317adbb24f1d80ec61f596b0c57c8bbe23b

Download | Favorite | View