Mageia: 2020-0376 High: cifs-utils Shell Injection Issue
mageia
September 27, 2020
The mount.cifs utility has a shell injection issue where one can embed shell commands via the username mount option
Summary
The mount.cifs utility has a shell injection issue where one can embed shell
commands via the username mount option. Those commands will be run via popen()
in the context of the user calling mount (CVE-2020-14342).
References
- https://bugs.mageia.org/show_bug.cgi?id=27315
-
- https://lists.suse.com/pipermail/sle-security-updates/2020-September/007471.html
- https://www.cve.org/CVERecord?id=CVE-2020-14342
Resolution
SRPMS
- 7/core/cifs-utils-6.9-6.1.mga7
PREVIOUS
NEXT
Publication date: 27 Sep 2020
URL: https://advisories.mageia.org/MGASA-2020-0376.html
Type: security
CVE: CVE-2020-14342
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!