The vulnerability of the cifs.upcall function in the CIFS network file system mounting utility package cifs-utils allows a attacker to disclose sensitive information.

The vulnerability of the cifs.upcall function in the CIFS network file system mounting utility package cifs-utils relates to the provision of error session data elements. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...