Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Mageia: 2021-0278 Moderate: Samba-Client Security Vulnerability

mageia
Calendar Grey June 23, 2021
Dist Mageia Esm H88
The security advisory MGASA-2021-0277 from Mageia highlights a vulnerability in cifs-utils that may compromise both data integrity and confidentiality.
A flaw was found in cifs-utils in versions before 6.13

Summary

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity (CVE-2021-20208).

References

- https://bugs.mageia.org/show_bug.cgi?id=29056

-

-

- https://www.cve.org/CVERecord?id=CVE-2021-20208

Topics%20covered

Topics Covered

security advisory security flaw data confidentiality cifs-utils integrity issue Mageia

Resolution

SRPMS

- 8/core/cifs-utils-6.11-2.1.mga8

- 7/core/cifs-utils-6.9-6.2.mga7

Publication date: 23 Jun 2021
URL: https://advisories.mageia.org/MGASA-2021-0277.html
Type: security
CVE: CVE-2021-20208

Topics%20covered

Topics Covered

security advisory security flaw data confidentiality cifs-utils integrity issue Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here