Alerts This Week
Warning Icon 1 1,375
Alerts This Week
Warning Icon 1 1,375

Ubuntu 16.04 & 14.04: cifs-utils Security Advisory 7688-1

ubuntu
Calendar Grey August 7, 2025
Dist Ubuntu Esm H88
Numerous vulnerabilities addressed in samba packages affect Debian 8 and 9, necessitating urgent patches to ensure system safety.
Several security issues were fixed in cifs-utils.

Summary

Several security issues were fixed in cifs-utils.

Software Description:

- cifs-utils: Common Internet File System utilities

Details:

Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a

password. In certain environments, a local attacker could possibly use this

issue to escalate privileges. (CVE-2020-14342)

It was discovered that cifs-utils incorrectly used host credentials when

mounting a krb5 CIFS file system from within a container. An attacker

inside a container could possibly use this issue to obtain access to

sensitive information. (CVE-2021-20208)

It was discovered that cifs-utils incorrectly handled certain command-line

arguments. A local attacker could possibly use this issue to obtain root

privileges. (CVE-2022-27239)

It was discovered that cifs-utils incorrectly handled verbose logging. A

local attacker could possibly use this issue to obtain sensitive

information. (CVE-2022-29869)

Topics%20covered

Topics Covered

security advisory Ubuntu local access escalation cifs-utils privilige issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  cifs-utils                      2:6.4-1ubuntu1.1+esm1
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  cifs-utils                      2:6.0-1ubuntu2+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7688-1

CVE-2020-14342, CVE-2021-20208, CVE-2022-27239, CVE-2022-29869

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7688-1

Topics%20covered

Topics Covered

security advisory Ubuntu local access escalation cifs-utils privilige issue

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here