Buffer overflow in Hp Helion_openstack
CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Vulnerability class: Buffer Overflow
EPSS: 0.006 (43.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Hp Helion_openstack — versions 8.0
- Samba Cifs-utils
- Debian Debian_linux — versions 9.0, 10.0, 11.0
- Fedoraproject Fedora — versions 34, 35, 36
- Suse Caas_platform — versions 4.0
- Suse Enterprise_storage — versions 6.0, 7.0
- Suse Linux_enterprise_desktop — versions 15
- Suse Linux_enterprise_high_performance_computing — versions 12.0, 15.0
- Suse Linux_enterprise_micro — versions 5.2
- Suse Linux_enterprise_point_of_service — versions 11.0
Weakness classification (CWE)
References
- cve@mitre.org (Patch, Third Party Advisory, Issue Tracking)
- cve@mitre.org (Third Party Advisory)
- cve@mitre.org (Patch, Third Party Advisory)
- cve@mitre.org (Permissions Required, Issue Tracking, Vendor Advisory)
- cve@mitre.org (Patch, Third Party Advisory, Issue Tracking)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (mailing-list, Mailing List, Third Party Advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-27239?
- CVE-2022-27239 is a high-severity vulnerability in Hp Helion_openstack, classified under Out-of-bounds Write. CVSS score: 7.8/10. Published 2022-04-27.
- How severe is CVE-2022-27239?
- High severity. CVSS v3 base score is 7.8 out of 10.