Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-29869

Fixed in a distro release EPSS 2%

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Published 2022-04-28 · CVE record · OSV

Products: samba cifs-utils, fedoraproject fedora, debian_linux

Distro releases

ReleasePackageFixed in
Alpine 3.16cifs-utils6.15-r0
Alpine 3.17cifs-utils6.15-r0
Alpine 3.18cifs-utils6.15-r0
Alpine 3.19cifs-utils6.15-r0
Alpine 3.20cifs-utils6.15-r0
Alpine 3.21cifs-utils6.15-r0
Alpine 3.22cifs-utils6.15-r0
Alpine 3.23cifs-utils6.15-r0
Alpine 3.24cifs-utils6.15-r0
Amazon Linux 2cifs-utils6.2-10.amzn2.0.4
Amazon Linux 2cifs-utils-devel6.2-10.amzn2.0.4
Amazon Linux 2023cifs-utils6.15-1.amzn2023.0.2
Amazon Linux 2023cifs-utils-devel6.15-1.amzn2023.0.2
Amazon Linux 2023cifs-utils-info6.15-1.amzn2023.0.2
Amazon Linux 2023pam_cifscreds6.15-1.amzn2023.0.2
Debian 10cifs-utils2:6.8-2+deb10u1
Debian 11cifs-utils2:6.11-3.1+deb11u1
Debian 12cifs-utils2:6.14-1.1
Debian 13cifs-utils2:6.14-1.1
Debian 14cifs-utils2:6.14-1.1
Debian 9cifs-utils2:6.7-1+deb9u1
SUSE Linux Enterprise Micro 5.2cifs-utils6.9-150100.5.18.1
SUSE Linux Enterprise Micro 5.3cifs-utils6.15-150400.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP3cifs-utils6.9-150100.5.18.1
SUSE Linux Enterprise Module for Basesystem 15 SP4cifs-utils6.15-150400.3.9.1
SUSE Linux Enterprise Server 12 SP5cifs-utils6.9-13.23.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5cifs-utils6.9-13.23.1
SUSE Linux Enterprise Software Development Kit 12 SP5cifs-utils6.9-13.23.1
Ubuntu 18.04 LTScifs-utils2:6.8-1ubuntu1.2
Ubuntu 20.04 LTScifs-utils2:6.9-1ubuntu0.2
Ubuntu 22.04 LTScifs-utils2:6.14-1ubuntu0.1
Ubuntu Pro 14.04 LTScifs-utils2:6.0-1ubuntu2+esm1
Ubuntu Pro 16.04 LTScifs-utils2:6.4-1ubuntu1.1+esm1
openSUSE Leap 15.3cifs-utils6.9-150100.5.18.1
openSUSE Leap 15.4cifs-utils6.15-150400.3.9.1
openSUSE Leap Micro 5.2cifs-utils6.9-150100.5.18.1