Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-27239: A stack-based buffer overflow issue was found in pifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | cifs-utils | 0:6.2-10.amzn2.0.3 |
| Amazon Linux · 2 | cifs-utils-debuginfo | 0:6.2-10.amzn2.0.3 |
| Amazon Linux · 2 | cifs-utils-devel | 0:6.2-10.amzn2.0.3 |
Vulnerabilities 1
-
Unscored —
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could l…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-27239.html