Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 27 Apr 2022 09:45:54 +0200
From: Marcus Meissner <>
To: OSS Security List <>
Subject: CVE-2022-27239: cifs-utils mount.cifs buffer overflow in ip parameter


A buffer overflow in mounts.cifs commandline parameter ip= handling
was just fixed/published.


(mounts.cifs is usually setuid-root)

This was reported by Jeffrey Bencteux <> to samba security.

Both -fstack-protector and -D_FORTIFY_SOURCE=2 overflow protections are catching it.

Ciao, Marcus

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.