CVE-2022-29869: debian debian_linux
CVSS: 5.3v3.1MediumModified
AliasesALPINE-CVE-2022-29869SUSE-SU-2022:2801-1SUSE-SU-2022:2802-1SUSE-SU-2022:3525-1UBUNTU-CVE-2022-29869DEBIAN-CVE-2022-29869openSUSE-SU-2022:2801-1
Published 28-04-2022Last modified 03-08-2024
Vulnerability summary
CVE-2022-29869 is a medium (CVSS 5.3) vulnerability in debian debian_linux. EPSS estimates a 1.93% chance of exploitation in the next 30 days, higher than 79.6% of scored vulnerabilities.
CVSS score
5.3/10
010
Medium · v3.1 (NVD)EPSS score
1.93%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 2Timeline
- 28-04-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.
CVSS metrics
5 scores · 4 sources · 2 versionsMedium 5.3Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NSourcesAll 4 agree
- OSV · AlpineEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
1.93%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.93% on 18-09-2026
18-09-202618-10-2026
EPSS score1.93%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse7 products
- cifs-utils&distro=SUSE Linux Enterprise Micro 5.2< 6.9-150100.5.18.1
- cifs-utils&distro=SUSE Linux Enterprise Micro 5.3< 6.15-150400.3.9.1
- cifs-utils&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3< 6.9-150100.5.18.1
- cifs-utils&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 6.15-150400.3.9.1
- cifs-utils&distro=SUSE Linux Enterprise Server 12 SP5< 6.9-13.23.1
Opensuse3 products
- cifs-utils&distro=openSUSE Leap 15.3< 6.9-150100.5.18.1
- cifs-utils&distro=openSUSE Leap 15.4< 6.15-150400.3.9.1
- cifs-utils&distro=openSUSE Leap Micro 5.2< 6.9-150100.5.18.1
Debian2 products
- cifs-utils< 2:6.14-1.1
- debian_linuxEOL9.0 | 10.0 | 11.0
Alpine1 product
- cifs-utils< 6.15-r0
Fedoraproject1 product
- fedoraEOL34 | 35 | 36
Samba1 product
- cifs-utils< 6.15
Ubuntu1 product
- cifs-utils< 2:6.0-1ubuntu2+esm1 | < 2:6.4-1ubuntu1.1+esm1 | < 2:6.8-1ubuntu1.2 | < 2:6.9-1ubuntu0.2 | < 2:6.14-1ubuntu0.1
7 vendors · 16 products
References
21 links- github.com/piastry/cifs-utils/commit/8acc963a2e7e9d63fe1f2e7f73f5a03f83d9c379PatchThird Party Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- security.gentoo.org/glsa/202311-05Vendor Advisory
Show all 21 references
- lists.opensuse.org/archives/…Advisory
