CVE catalog

CVE-2022-29869

cifs-utils: CVE-2022-29869

[CVE catalog]

Severity
Medium · CVSS 4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.92% · Oct 25, 2026

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancifs-utilssid2:7.9-1fixed
Debiancifs-utilsforky2:7.9-1fixed
Debiancifs-utilstrixie2:7.4-1fixed
Debiancifs-utilstrixie-security2:7.4-1+deb13u2fixed
Debiancifs-utilsbookworm2:7.0-2fixed
Susecifs-utilslinux enterprise module for basesystem 15 sp36.9-150100.5.18.1fixed
Susecifs-utilslinux enterprise micro 5.26.9-150100.5.18.1fixed
Opensusecifs-utilsleap 15.36.9-150100.5.18.1fixed
Ubuntucifs-utilspro2:6.4-1ubuntu1vulnerable
Ubuntucifs-utilspro2:6.4-1ubuntu1.1vulnerable
Ubuntucifs-utilspro2:6.4-1ubuntu1.1+esm1fixed
Ubuntucifs-utils18.042:6.7-1vulnerable
Ubuntucifs-utils18.042:6.8-1vulnerable
Ubuntucifs-utils18.042:6.8-1ubuntu1vulnerable
Ubuntucifs-utils18.042:6.8-1ubuntu1.1vulnerable
Ubuntucifs-utils18.042:6.8-1ubuntu1.2fixed
Ubuntucifs-utils20.042:6.9-0ubuntu1vulnerable
Ubuntucifs-utils20.042:6.9-1vulnerable
Ubuntucifs-utils20.042:6.9-1ubuntu0.1vulnerable
Ubuntucifs-utils20.042:6.9-1ubuntu0.2fixed
Ubuntucifs-utils22.042:6.11-3.1vulnerable
Ubuntucifs-utils22.042:6.14-1vulnerable
Ubuntucifs-utils22.042:6.14-1build1vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.1fixed
Opensusecifs-utilsleap micro 5.26.9-150100.5.18.1fixed
Susecifs-utilslinux enterprise software development kit 12 sp56.9-13.23.1fixed
Susecifs-utilslinux enterprise server 12 sp56.9-13.23.1fixed
Susecifs-utilslinux enterprise server for sap applications 12 sp56.9-13.23.1fixed
Susecifs-utilslinux enterprise micro 5.36.15-150400.3.9.1fixed
Susecifs-utilslinux enterprise module for basesystem 15 sp46.15-150400.3.9.1fixed
Opensusecifs-utilsleap 15.46.15-150400.3.9.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancifs-utilssourcesid2:6.14-1.1not yet assignedNot reported[1010818]
Debiancifs-utilssourceforky2:6.14-1.1not yet assignedNot reported[1010818]
Debiancifs-utilssourcetrixie2:6.14-1.1not yet assignedNot reported[1010818]
Debiancifs-utilssourcebookworm2:6.14-1.1not yet assignedNot reported[1010818]
Susecifs-utilsrpmlinux enterprise module for basesystem 15 sp36.9-150100.5.18.1Not reportedSUSE-SU-2022:2801-1Not reported
Susecifs-utilsrpmlinux enterprise micro 5.26.9-150100.5.18.1Not reportedSUSE-SU-2022:2801-1Not reported
Opensusecifs-utilsrpmleap 15.36.9-150100.5.18.1Not reportedSUSE-SU-2022:2801-1Not reported
Ubuntucifs-utilsdebpro2:6.4-1ubuntu1.1+esm1Not reportedUBUNTU-CVE-2022-29869Not reported
Ubuntucifs-utilsdeb18.042:6.8-1ubuntu1.2Not reportedUBUNTU-CVE-2022-29869Not reported
Ubuntucifs-utilsdeb20.042:6.9-1ubuntu0.2Not reportedUBUNTU-CVE-2022-29869Not reported
Ubuntucifs-utilsdeb22.042:6.14-1ubuntu0.1Not reportedUBUNTU-CVE-2022-29869Not reported
Opensusecifs-utilsrpmleap micro 5.26.9-150100.5.18.1Not reportedOPENSUSE-SU-2022:2801-1Not reported
Susecifs-utilsrpmlinux enterprise software development kit 12 sp56.9-13.23.1Not reportedSUSE-SU-2022:2802-1Not reported
Susecifs-utilsrpmlinux enterprise server 12 sp56.9-13.23.1Not reportedSUSE-SU-2022:2802-1Not reported
Susecifs-utilsrpmlinux enterprise server for sap applications 12 sp56.9-13.23.1Not reportedSUSE-SU-2022:2802-1Not reported
Susecifs-utilsrpmlinux enterprise micro 5.36.15-150400.3.9.1Not reportedSUSE-SU-2022:3525-1Not reported
Susecifs-utilsrpmlinux enterprise module for basesystem 15 sp46.15-150400.3.9.1Not reportedSUSE-SU-2022:3525-1Not reported
Opensusecifs-utilsrpmleap 15.46.15-150400.3.9.1Not reportedSUSE-SU-2022:3525-1Not reported

[Debian bug #1010818]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [cifs-utils]Unknown
    Details (2)

    • 2:7.0-2 · amd64 · bookworm

      Fixed · Fixed: 2:6.14-1.1

      dsa · cifs-utils · debian · bookworm

    • 2:7.0-2 · arm64 · bookworm

      Fixed · Fixed: 2:6.14-1.1

      dsa · cifs-utils · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]