CVE-2014-2830 Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cifs-utils(Debian:12) | All versions | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.0-2 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.0-2.1 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.1-1 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.2-1 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.2-2 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.3-1 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.4-1 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.8-1 | No fix listed |
| debian/cifs-utils(Debian:12) | = 2:7.9-1 | No fix listed |
| debian/cifs-utils(Debian:13) | All versions | No fix listed |
| debian/cifs-utils(Debian:13) | = 2:7.4-1 | No fix listed |
| debian/cifs-utils(Debian:13) | = 2:7.4-1+deb13u1 | No fix listed |
| debian/cifs-utils(Debian:13) | = 2:7.4-1+deb13u2 | No fix listed |
| debian/cifs-utils(Debian:13) | = 2:7.8-1 | No fix listed |
| debian/cifs-utils(Debian:13) | = 2:7.9-1 | No fix listed |
| debian/cifs-utils(Debian:14) | All versions | No fix listed |
| debian/cifs-utils(Debian:14) | = 2:7.4-1 | No fix listed |
| debian/cifs-utils(Debian:14) | = 2:7.8-1 | No fix listed |
| debian/cifs-utils(Debian:14) | = 2:7.9-1 | No fix listed |
| debian/cifs-utils | <= 6.3 | No fix listed |
References
- Debian Security Tracker CVE-2014-2830 vendor-advisory
- advisories.mageia.org
- [oss-security] 20140411 Re: pam_cifscreds stack overflow mailing-list
- MDVSA-2015:114 vendor-advisory
- bugs.mageia.org
- bugzilla.novell.com
- bugzilla.redhat.com
- [samba-technical] 20140711 ANNOUNCE: cifs-utils release 6.4 ready for download mailing-list
- GLSA-201612-08 vendor-advisory