Description
Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.
References (8)
Core 8
Core References
Various Sources mailing-list
x_refsource_mlist
https://lists.samba.org/archive/samba-technical/2014-July/101132.html
Various Sources x_refsource_confirm
https://bugs.mageia.org/show_bug.cgi?id=13386
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2015:114
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1086224
Issue Tracking x_refsource_confirm
https://bugzilla.novell.com/show_bug.cgi?id=870168
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0242.html
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q2/96
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201612-08
Scores
EPSS
0.0518
EPSS Percentile
91.5%
Details
CWE
CWE-119
Status
published
Products (1)
debian/cifs-utils
< 6.3
Published
Mar 31, 2015
Tracked Since
Feb 18, 2026