Lucene search
Redhat.comRH:CVE-2020-14342HistorySep 07, 2020 - 7:19 a.m.
CVE-2020-14342
2020-09-0707:19:40
redhat.com
access.redhat.com
22
cifs-utils
mount.cifs
samba password
arbitrary commands
privilege escalation
confidentiality
integrity
system availability
EPSS
0.002
Percentile
61.2%
A flaw was found in cifs-utils’ mount.cifs where it was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. This flaw allows an attacker who can invoke mount.cifs with special permission, such as via sudo rules, to escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Related
cbl_mariner
cbl_mariner
CVE-2020-14342 affecting package cifs-utils for versions less than 6.8-6
2022-04-09 06:51:43
CVE-2020-14342 affecting package cifs-utils 6.8-6
2020-11-05 04:21:18
openvas
openvas
Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-1284)
2021-02-22 00:00:00
Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2020-2174)
2020-10-12 00:00:00
Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2130)
2021-07-07 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : cifs-utils (EulerOS-SA-2020-2305)
2020-11-02 00:00:00
EulerOS 2.0 SP9 : cifs-utils (EulerOS-SA-2020-2164)
2020-10-09 00:00:00
RHEL 8 : cifs-utils (Unpatched Vulnerability)
2024-05-11 00:00:00
cve
cve
CVE-2020-14342
2020-09-09 12:15:11
veracode
veracode
Privilege Escalation
2020-09-21 06:27:28
debiancve
debiancve
CVE-2020-14342
2020-09-09 12:15:11
fedora
fedora
[SECURITY] Fedora 33 Update: cifs-utils-6.11-1.fc33
2020-11-11 01:21:13
[SECURITY] Fedora 32 Update: cifs-utils-6.11-1.fc32
2020-11-11 01:21:33
mageia
mageia
Updated cifs-utils packages fix security vulnerability
2020-09-27 23:06:37
suse
suse
Security update for cifs-utils (moderate)
2020-09-30 00:00:00
Security update for cifs-utils (important)
2021-05-01 00:00:00
osv
osv
CVE-2020-14342
2020-09-09 12:15:11
cifs-utils vulnerabilities
2022-06-02 16:41:26
cifs-utils-6.13-1.3 on GA media
2024-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2020-14342
2020-09-09 00:00:00
nvd
nvd
CVE-2020-14342
2020-09-09 12:15:11
alpinelinux
alpinelinux
CVE-2020-14342
2020-09-09 12:15:11
gentoo
gentoo
LinuxCIFS: Shell injection
2020-09-29 00:00:00
cvelist
cvelist
CVE-2020-14342
2020-09-09 11:13:35
prion
prion
Design/Logic Flaw
2020-09-09 12:15:00
ubuntu
ubuntu
cifs-utils vulnerabilities
2022-06-02 00:00:00
photon
photon