Vulnerability CVE-2022-29869: Information

Description

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Severity: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Published: April 28, 2022
Modified: Nov. 24, 2023
Error type identifier: CWE-532

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
cifs-utilssisyphus6.15-alt17.0-alt1ALT-PU-2022-2522-1306005Fixed
cifs-utilssisyphus_e2k6.15-alt17.0-alt1ALT-PU-2022-5942-1-Fixed
cifs-utilssisyphus_mipsel6.15-alt17.0-alt1ALT-PU-2022-5889-1-Fixed
cifs-utilssisyphus_riscv646.15-alt17.0-alt1ALT-PU-2022-5891-1-Fixed
cifs-utilsp106.15-alt16.15-alt1ALT-PU-2022-2576-1306006Fixed
cifs-utilsp10_e2k6.15-alt16.15-alt1ALT-PU-2022-6096-1-Fixed
cifs-utilsc10f16.15-alt16.15-alt1ALT-PU-2022-2576-1306006Fixed
cifs-utilsc9f26.15-alt16.15-alt1ALT-PU-2022-2563-1306007Fixed

References to Advisories, Solutions, and Tools

    1. Configuration 1

      cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:*
      End excliding
      6.15

      Configuration 2

      cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

      cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

      cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*