DEBIAN-CVE-2020-14342

DEBIAN-CVE-2020-14342 PUBLISHED CVSS 7 HIGH

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

Risk Scores

CVSS 3.1

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:14	cifs-utils	0, 0, 0
Debian:12	cifs-utils	0, 0, 0
Debian:13	cifs-utils	0, 0, 0
Debian:11	cifs-utils	0, 0, 0

Exploit Intelligence

redhat-oval_test.go (github-poc)

Timeline

Sep 9, 2020 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2020-14342 advisory

Open in Interactive Console →