Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-20208

Fixed in a distro release EPSS <1%

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.

Published 2021-04-19 · CVE record · OSV

Products: samba cifs-utils, redhat enterprise_linux, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Alpine 3.10cifs-utils6.13-r0
Alpine 3.11cifs-utils6.13-r0
Alpine 3.12cifs-utils6.13-r0
Alpine 3.13cifs-utils6.13-r0
Alpine 3.14cifs-utils6.13-r0
Alpine 3.15cifs-utils6.13-r0
Alpine 3.16cifs-utils6.13-r0
Alpine 3.17cifs-utils6.13-r0
Alpine 3.18cifs-utils6.13-r0
Alpine 3.19cifs-utils6.13-r0
Alpine 3.20cifs-utils6.13-r0
Alpine 3.21cifs-utils6.13-r0
Alpine 3.22cifs-utils6.13-r0
Alpine 3.23cifs-utils6.13-r0
Alpine 3.24cifs-utils6.13-r0
Arch Linuxcifs-utils6.13-1
Debian 12cifs-utils2:6.11-3
Debian 13cifs-utils2:6.11-3
Debian 14cifs-utils2:6.11-3
SUSE Linux Enterprise High Performance Computing 15-ESPOScifs-utils6.9-3.14.1
SUSE Linux Enterprise High Performance Computing 15-LTSScifs-utils6.9-3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP2cifs-utils6.9-5.9.1
SUSE Linux Enterprise Server 12 SP5cifs-utils6.9-13.14.1
SUSE Linux Enterprise Server 15-LTSScifs-utils6.9-3.14.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5cifs-utils6.9-13.14.1
SUSE Linux Enterprise Server for SAP Applications 15cifs-utils6.9-3.14.1
SUSE Linux Enterprise Software Development Kit 12 SP5cifs-utils6.9-13.14.1
Ubuntu 18.04 LTScifs-utils2:6.8-1ubuntu1.2
Ubuntu 20.04 LTScifs-utils2:6.9-1ubuntu0.2
Ubuntu 22.04 LTScifs-utils2:6.14-1ubuntu0.1
Ubuntu Pro 14.04 LTScifs-utils2:6.0-1ubuntu2+esm1
Ubuntu Pro 16.04 LTScifs-utils2:6.4-1ubuntu1.1+esm1
openSUSE Leap 15.2cifs-utils6.9-lp152.2.3.1
openSUSE Tumbleweedcifs-utils6.13-1.3