Stay Secure with the Latest Linux Advisories

security advisorysecurity updatesecurity fix

Mageia: 2020-0376 High: cifs-utils Shell Injection Issue

The mount.cifs utility has a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen() in the context of the user calling mount (CVE-2020-14342). References: . MGASA-2020-0376 - Updated cifs-utils packages fix security vulnerability Publication date: 27 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0376.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-14342 The mount.cifs utility has a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen() in the context of the user calling mount (CVE-2020-14342). References: - https://bugs.mageia.org/show_bug.cgi?id=27315 - - https://lists.suse.com/pipermail/sle-security-updates/2020-September/007471.html - https://www.cve.org/CVERecord?id=CVE-2020-14342 SRPMS: - 7/core/cifs-utils-6.9-6.1.mga7 . Critical security patch for cifs-utils resolving shell execution vulnerability in Mageia 7. Find more information and corrective actions here.. Cifs-utils, Shell Injection, Security Update, Mageia, Mount Utility. . LinuxSecurity.com Team

Sep 27, 2020 Mageia