Vulnerability · Published Sep 9, 2020 · Assigned by redhat
CVE-2020-14342
Medium 4.4
In plain English
A medium-severity command injection in cifs-utils from samba. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.7%top 48.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | cifs-utils | 2:6.11-1 | DEBIAN-CVE-2020-14342 |
| Debian:13 | cifs-utils | 2:6.11-1 | DEBIAN-CVE-2020-14342 |
| Debian:14 | cifs-utils | 2:6.11-1 | DEBIAN-CVE-2020-14342 |
| Ubuntu:22.04:LTS | cifs-utils | 2:6.14-1ubuntu0.1 | USN-5459-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| samba | cifs-utils | 6.11 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
References
- https://lists.samba.org/archive/samba-technical/2020-September/135747.html x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14342 x_refsource_CONFIRM
- GLSA-202009-16 vendor-advisory, x_refsource_GENTOO
- openSUSE-SU-2020:1579 vendor-advisory, x_refsource_SUSE
- FEDORA-2020-ea0b9caac3 vendor-advisory, x_refsource_FEDORA
- FEDORA-2020-cfdd73f1b4 vendor-advisory, x_refsource_FEDORA