Lucene search

K

RedhatCVELIST:CVE-2021-20208

HistoryApr 19, 2021 - 9:12 p.m.

CVE-2021-20208

2021-04-1921:12:00

CWE-266

redhat

www.cve.org

2

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.

CNA Affected

[
  {
    "product": "cifs-utils",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "cifs-utils 6.13"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1921116

bugzilla.samba.org/show_bug.cgi?id=14651

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WJ3SVBHCSNQZAWSGLB6FBOCFU45FFG/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4BZSJXROEFHYATAAHHRR6P3HUSMPQB3/

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

Related for CVELIST:CVE-2021-20208

nessus24 prion1 openvas22 ubuntucve1 photon8 debiancve1 cve1 mageia1 cbl_mariner2 veracode1 nvd1 redhatcve1 fedora3 osv2 alpinelinux1 rosalinux2 suse1 ubuntu1