Debian Cifs-Utils vulnerabilities

2 CVEs affecting Debian Cifs-Utils, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2830, published 2015-03-31.

More from Debian.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-2830, published 2015-03-31. High severity, CVSS 10.0. EPSS: 5.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pam_cifscreds, allows remote attackers to have unspecified impact via unknown vectors.
• CVE-2012-1586, published 2012-08-27. Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days. mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second argument, which reveals their existence in an error…