CVE-2022-29869

Name
CVE-2022-29869
Description
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/piastry/cifs-utils/pull/7
MISC https://github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/
MLIST https://lists.debian.org/debian-lts-announce/2022/05/msg00020.html
DEBIAN https://www.debian.org/security/2022/dsa-5157
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIYZ4L6SLSYJQ446VJAO2VGAESURQNSP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXKZLJYJJEC3TIBFLXUORRMZUKG5W676/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5WBOLMANBYJILXQKRRK7OCR774PXJAYY/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:* cifs-utils >= None <= 6.14
cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:* cifs-utils >= None < 6.15

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
cifs-utils edge-main 6.15-r0 Francesco Colista <fcolista@alpinelinux.org> fixed
cifs-utils edge-main 6.13-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
cifs-utils edge-main 6.11-r0 None possibly vulnerable
cifs-utils 3.22-main 6.15-r0 None fixed
cifs-utils 3.22-main 6.13-r0 None possibly vulnerable
cifs-utils 3.21-main 6.15-r0 None fixed
cifs-utils 3.21-main 6.13-r0 None possibly vulnerable
cifs-utils 3.20-main 6.15-r0 None fixed
cifs-utils 3.20-main 6.13-r0 None possibly vulnerable
cifs-utils 3.19-main 6.15-r0 None fixed
cifs-utils 3.19-main 6.13-r0 None possibly vulnerable
cifs-utils 3.18-main 6.15-r0 None fixed
cifs-utils 3.17-main 6.15-r0 None fixed
cifs-utils 3.12-main 6.13-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable